Re: PROPFIND Depth:1 and ACLs

Werner Donné <[email protected]>
Newsgroups gmane.ietf.webdav
Organization Re
Message-ID <[email protected]>
>> Note that having to use PROPFIND to retrieve the contents of a
>> collection has a serious impact on performance when ACLs are supported.
> 
> Could you a be a bit more specific? Would a PROPFIND where just the 
> member names are being returned sufficient?

Indeed, because as soon as one property is also returned an ACL check is
required for each member, which is expensive if the collection has a lot
of members, say a few thousand.

I agree it should be allowed to hide collection members if this fits
some security policy better. If I would speak as a user, however, I
probably would hide a document in a collection that is not readable. It
feels closer to real life.

> 
> Best regards, Julian
> 
> (adding to new issues to 
> <http://greenbytes.de/tech/webdav/draft-reschke-webdav-rfc2518bis-latest.html>) 

Best regards,

Werner.
-- 
Werner Donné  --  Re
Engelbeekstraat 8
B-3300 Tienen
tel: (+32) 486 425803	e-mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.