Hi, Is there are shared cache for compiled ACL's in Jackrabbit 1.6 and later ?
The reason I ask is AFAICT there is a LRUMap inside the AbstractCompiledPermissions that is bound via the DefaultSecurityManager to the Session, but that only lives as log as the Session remains logged in. If the Sessions are not pooled in a web environment, then only the permissions associated with the current request are cached in compiled form. This is probably fine for a repository that is read mostly, but where there are many complex ACL's (with denies) that force ACL compilation, caching compilation result will have (IMVHO, no evidence yet) a significant long terms effect over may requests. I have heard rumour (d...@sling) that there is a shared compiled ACL cache in Jackrabbit 1.6 and later, but I cant find it anywhere and need to check that my local customisations haven't broken it. Thanks Ian
