Hi! I was recently hit by https://issues.apache.org/jira/browse/SHIRO-440. Basically, our app slowed to a crawl because we were using String permissions instead of directly adding Permission objects. Since the default code creates a new instance of WildcardPermission for every single String permission you have added when you call isPermitted(), this is a whole lot of useless parsing and object creation.
Any plans on resolving this? Is there some particular reason why String permissions aren’t simply just parsed at creation time? /Janne
