Grouper Developers Forum

["Michael R. Gettes" <>]

FWIW - this is what most LDAP servers do.  As we continue down these  
performance
paths - I think we can learn a lot from the techniques of LDAP  
servers (fairly
well documented by both Sun and OpenLDAP) and apply them to Grouper.   
Space/time
trade-offs are a big issue for LDAP and as long as the right control  
knobs are
there for caching (and negating the cache when modifications happen  
for appropriate
operations) then caching as much as possible is the right way to go.

Nice work Shilen!

/mrg

On Oct 19, 2007, at 9:22, Shilen Patel wrote:

> > I wonder whether the privilege checks should be done on the final  
> > resultset after all the search filters have been resolved. Each  
> > search filter may return a lot of results, but ANDed searches may  
> > cause many to be discarded.
>
> That's a great suggestion given how expensive the privilege checks  
> are.  I'll look into that.