[Cosmo-dev] WebDAV ACL model thoughts

[Randy Letness]

Vinubalaji Gopal wrote:
> Hi all,
>   I have put my thoughts and Randy's suggestion on the model at the
> following page. 
> http://wiki.osafoundation.org/bin/view/Journal/WebDavACLModelThoughts
>
>   
In the relational view, we can express the Group -- Principal
relationship as a many-to-many relationship, meaning that a
Principal (Group or User) can belong to many Groups.  So
the User and Group table would have no foreign keys.  This
relationship would be in a separate table containing groupid
and principalid.

> I think implementing the new acegi interface (from the sandbox) will be
> most ideal (the third option in the list) and/or use some of the
> existing implementations. The other acl interfaces in the acegi sandbox
> code seems to be more flexible and easier to understand.
>
>   
I need to look at the new 1.1 stuff, but I agree that we should try
leverage as much code as possible.

> Apart from that acegi does not support a Hibernate dao in favor of jdbc
> for better performance (there is a jira issue about hibernate dao
> support but it has been ignored in favor of the jdbc dao). So I would
> also be implementing this dao's.
>   
Yeah this shouldn't be a problem.  Maybe we can contribute to
their code base.

> I am worried about the performance issues since accessing each item will
> involve a few more database fetches. I am thinking of some kind of nice
> caching strategy for better performance and I am sure that Hibernate
> will help to achieve this using ehcache, etc. Of course that will be at
> a later stage, first will be proof of concept of a working group based
> access :).
>
>   
There is going to be a performance hit due to the extra joins
and fetches, but the Hibernate caches (L1 and L2) should help
reduce those.  We'll have to tweak the cache settings once things
are up and running.

-Randy