> > I think this approach with a protected subnode should be fine - and no > performance issue. ACL checks are done for every node anyway. > I thought more in the direction of node traversal. Instead of loading just one node and checking ACLs I have to load the parent node and three childnodes to get a complete view. I have no idea how node retrieval is implemented in jackrabbit but given there is a database behind I fear that I have four db requests (parent+3 children) reads instead of one to create my view. Multiply this with several thousand and it can make a difference.
Regards, Markus
