Mailing-List: contact oak-dev-help@jackrabbit.apache.org; run by ezmlm
Precedence: bulk
Reply-To: oak-dev@jackrabbit.apache.org
Received-SPF: pass (nike.apache.org: domain of jukka.zitting@gmail.com
 designates 209.85.214.175 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <514C93F0.4040107@adobe.com>
References: 
 <9C0FC4C8E9C29945B01766FC7F9D3898178B1A68D8@eurmbx01.eur.adobe.com>
 <51487168.6050906@adobe.com>
 <9C0FC4C8E9C29945B01766FC7F9D3898178BA0F7B3@eurmbx01.eur.adobe.com>
 <514C4510.7000508@apache.org> <514C725D.5080603@adobe.com>
 <CAOFYJNaGex3r7R6RQU6f=FP1PsM_vw7JLR3ed=Wd1Rk1zVJxtA@mail.gmail.com>
 <514C93F0.4040107@adobe.com>
From: Jukka Zitting <jukka.zitting@gmail.com>
Date: Tue, 26 Mar 2013 09:38:28 +0200
Message-ID: 
 <CAOFYJNZ1OECsPHSW1S+Y0-kQfnV=hZLZ_x+5Bu0RmWbHanmAmw@mail.gmail.com>
Subject: Re: svn commit: r1458234 - in /jackrabbit/oak/trunk:
 oak-core/src/main/java/org/apache/jackrabbit/oak/core/
 oak-core/src/main/java/org/apache/jackrabbit/oak/kernel/
 oak-core/src/main/java/org/apache/jackrabbit/oak/plugins/version/
 oak-core/src/main/java/o
To: Oak devs <oak-dev@jackrabbit.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

Hi,

On Fri, Mar 22, 2013 at 7:25 PM, Angela Schreiber <anchela@adobe.com> wrote:
> however, please keep in mind that if we are really going to move
> the permission evaluation below the tree level, we
> a) need to have an efficient way to determine the path of a
>    given node state (or it's immutabletree representation)
>    as our permission evaluation basically is path-based

Agreed. My main point above was just to note that the cost of caching
parent node states around is lower than that of caching paths.

We can definitely keep the path around in places where it is needed,
but as mentioned earlier I'd really like to avoid having to calculate
it for *all* node states. For example, assuming we implement the
optimization of detecting that the current user has full access to an
entire subtree, then there should be no need to keep track of paths
within that subtree as we can just skip all further access checks in
that subtree.

BR,

Jukka Zitting