RE: ACL performance again

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: owner-openldap-devel@OpenLDAP.org
> [mailto:owner-openldap-devel@OpenLDAP.org]On Behalf Of Stephan Siano

> Good idea. Actually the only ACLs which are value dependant are
> access to ... by dnattr=... self... clauses (b->a_dn_at and b->a_dn_self are
> not NULL for one of the items in the acl_access list of the access control)
> and those containing ACIs. Both conditions could be evaluated in aclparse.c.

Actually there's another case, ACL sets. Too bad there doesn't seem to be an
easy way to cache these, because they are value-dependent and can be very
complex and expensive to evaluate.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support