2008/8/30 Henrik Nordstrom <[EMAIL PROTECTED]>: >> Make sure you can collapse those ACLs down to something sensible for >> software processing before you go down that path! > > It's relatively easy to make a unified lookup tree of such structure, > and even if you don't it's still as fast or faster than the current acl > scheme.
Oh, I'm sure we could beat the current way we're using ACLs, the question is whether we can dramatically improve complicated ACL processing in the future. A big problem with the way we're inlining fast-path ACL lookups is that they suddenly become impossible to farm out to other threads. Adrian