Barry,

I just realised you said "Select against the same dataset".  Are you
selecting against an unrestricted model/graph? If you query a graph with
permissions to determine the permissions you can get into a situation where
things are running _very_ slowly.

How have you designed your permissions structure?  Are you reifying the
triples and then granting access to the reified nodes?  If so this is an
extremely processor intensive way of doing permissions checking.  The issue
being that your permissions graph will be larger than 3x the size of the
graph you are protecting.

Claude

On Mon, Jan 20, 2020 at 3:10 PM Claude Warren <[email protected]> wrote:

> Barry,
>
> Can you provide the configuration for the Fuseki server?  I need to know
> how the dataset(s) are constructed.
>
> Claude
>
> On Mon, Jan 20, 2020 at 11:10 AM Claude Warren <[email protected]> wrote:
>
>> I am not certain if the lock is the reason but am providing more
>> background on the permissions processing so someone with more dataset
>> experience can answer.
>>
>> To use the permissions on a dataset requires that the dataset be
>> constructed from individual models.  As each of the models would have to
>> have permissions assigned.  I put this out there because I know that TDB
>> has an internal dataset implementation and I want to make sure that we only
>> look in the stand alone dataset implementations.
>>
>> Claude
>>
>> On Mon, Jan 20, 2020 at 10:46 AM Nouwt, B. (Barry)
>> <[email protected]> wrote:
>>
>>> Hi all,
>>>
>>> we have a Security related scenario where whenever an INSERT query gets
>>> executed on our Fuseki dataset, we intercept the execution of this query
>>> (using Jena Permissions and its Security Evaluator) and during this
>>> interception we execute a SELECT query to the same dataset. Whenever we did
>>> this during a SELECT query (instead of an INSERT query), there was no
>>> problem, but when we do it during a INSERT query, it seems like the SELECT
>>> query hangs indefinitely. Could this be caused by a lock of the INSERT on
>>> that dataset?
>>>
>>> Regards, Barry
>>> This message may contain information that is not intended for you. If
>>> you are not the addressee or if this message was sent to you by mistake,
>>> you are requested to inform the sender and delete the message. TNO accepts
>>> no liability for the content of this e-mail, for the manner in which you
>>> use it and for damage of any kind resulting from the risks inherent to the
>>> electronic transmission of messages.
>>>
>>
>>
>> --
>> I like: Like Like - The likeliest place on the web
>> <http://like-like.xenei.com>
>> LinkedIn: http://www.linkedin.com/in/claudewarren
>>
>
>
> --
> I like: Like Like - The likeliest place on the web
> <http://like-like.xenei.com>
> LinkedIn: http://www.linkedin.com/in/claudewarren
>


-- 
I like: Like Like - The likeliest place on the web
<http://like-like.xenei.com>
LinkedIn: http://www.linkedin.com/in/claudewarren

Reply via email to