angela created OAK-3003:
---------------------------
Summary: Improve login performance with huge group membership
Key: OAK-3003
URL: https://issues.apache.org/jira/browse/OAK-3003
Project: Jackrabbit Oak
Issue Type: Improvement
Components: core
Reporter: angela
Assignee: angela
As visible when running {{LoginWithMembershipTest}} default login performance
(which uses the {{o.a.j.oak.security.principal.PrincipalProviderImpl}} to
lookup the complete set of principals) suffers when a given user is member of a
huge number of groups (see also OAK-2690 for benchmark data).
While using dynamic group membership (and thus a custom {{PrincipalProvider}}
would be the preferable way to deal with this, we still want to optimize
{{PrincipalProvider.getPrincipals(String userId}} for the default
implementation.
With the introduction of a less generic implementation in OAK-2690, we might be
able to come up with an optimization that makes use of the very implementation
details of the user management while at the same time being able to properly
secure it as we won't need to extend the public API.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
