Mailing-List: contact dev-help@chemistry.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@chemistry.apache.org
Received-SPF: pass (nike.apache.org: domain of andy.hind@alfresco.com
 designates 207.126.144.131 as permitted sender)
From: Andrew Hind <andy.hind@alfresco.com>
References: <etPan.53307b9f.61739451.5559@SilverSurfer-3.local>
In-Reply-To: <etPan.53307b9f.61739451.5559@SilverSurfer-3.local>
MIME-Version: 1.0
Thread-Index: AQJdK05L9kHW/Lm5vGisTwJ+6m1+LJnU6AYA
Date: Mon, 24 Mar 2014 20:29:21 -0000
Message-ID: <14797f1c606ef91c5410a04028d16590@mail.gmail.com>
Subject: RE: getTotalNumItems() returning wrong value
To: dev@chemistry.apache.org
Content-Type: text/plain; charset=ISO-8859-1

Hi Bindu

Yes there are plans to add support for any-deny-denies.
However, getTotalNumItems() is still going to give an "eventually
consistent" answer

Andy

-----Original Message-----
From: Bindu Wavell [mailto:bwavell@ziaconsulting.com]
Sent: 24 March 2014 18:38
To: dev@chemistry.apache.org
Subject: RE: getTotalNumItems() returning wrong value

Andy,

Are there any plans to move the any-deny-denies processing into SOLR so that
we can have both any-deny-denies and getTotalNumItems() that works at the
same time?

-- Bindu

---
Hi

We are pragmatic here.

If you are using SOLR and have any-deny-denies turned off you should get the
total number.
Any other case you will not.

If you use the DB or lucene or SOLR+any-deny-denies some or all permission
enforcement is done post query.

If you do
Select * from cmis:document
and you have 100M docs in your repo do you want to do 100M acl evals ?
We do enough to fulfil the page and see if there is one more.

Querying with SOLR can do permission evaluation in query.

You can choose the configuration options where this will work.
It is not the default.

Andy