Re: PROPFIND Depth:1 and ACLs
Werner Donné <[email protected]>
| Newsgroups | gmane.ietf.webdav |
|---|---|
| Organization | Re |
| Message-ID | <[email protected]> |
You are right. That would be much more efficient for any ACL check. Werner. Tim Olsen wrote: > > On 5/15/07, Werner Donné <[email protected]> wrote: >> That is true. You have to join with the ACEs granting or >> denying the "read", "read-acl", "read-current-user-privilege-set" >> and "all" privileges. The result set should then be matched >> with the current user. This can't be part of the same join, >> because of group memberships. > > They can be part of the same join if you keep a separate table of the > transitive closure of group memberships. > > -Tim > > -- Werner Donné -- Re Engelbeekstraat 8 B-3300 Tienen tel: (+32) 486 425803 e-mail: [email protected]