Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Evict all authorizations on rule events and do not cache authroizations with no matching rules #61

Conversation

groldan
Copy link
Member

@groldan groldan commented Apr 3, 2024

Caching authrization responses with no matching rules results in cached entries not being evicted when the request starts matching a rule.

In any case, evict all authorizations upon rule events because the affected rule ids held in AccessInfo is not enough to cherry pick which ones to evict. A rule change may change the affected rules.

@groldan groldan added the bug Something isn't working label Apr 3, 2024
…ns with no matching rules

Caching authrization responses with no matching rules results in cached
entries not being evicted when the request starts matching a rule.

In any case, evict all authorizations upon rule events because the
affected rule ids held in AccessInfo is not enough to cherry pick which
ones to evict. A rule change may change the affected rules.
@groldan groldan force-pushed the fix/dont_cache_accessinfo_with_no_matching_rules branch from fb9774f to aae26e9 Compare April 3, 2024 12:47
@groldan groldan merged commit 2715614 into geoserver:main Apr 3, 2024
4 checks passed
@groldan groldan deleted the fix/dont_cache_accessinfo_with_no_matching_rules branch April 3, 2024 12:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant