[Date Prev][Date Next]
(ITS#3510) ACL evaluation short-circuit would be nice
Full_Name: Luke Howard
Submission from: (NULL) (220.127.116.11)
Perhaps ACL evaluation could be short-circuited for "access to *".
Given a simple ACL configuration of:
access to *
by users read
by * none
on a heavily loaded machine, a search for "(objectClass=*)" takes a few seconds
to return as each entry is checked against the ACL rule.
It would be nice if an anonymous client could not consume server resources so