ieb/sparsemapcontent — Issue #126: Modifications to ACLs dont invalidate compiled ACLs in the in session cache
Author: ieb
Created: 2011-11-18 06:17:15+00:00
State: open

reported https://jira.sakaiproject.org/browse/KERN-2195

The problem is that ACLs are compiled and cached in session. If a session changes an ACL that cache is not invalidated. It only impacts the current session and the acls that are compiled. The simple solution is to clear the cache on acl update, as that will only impact the current session. The complex solution is to try and identify all potential matches, but that will probably require a full cache scan.

Looking wider this also impacts any other session, however the spec of sessions is that they are short lived, so we should not attempt to maintain pointers to all sessions that have compiled an ACL as it will only stay that way for a few ms.

All of that is from memory, need to look at the code.