Re: PROPFIND Depth:1 and ACLs

>> Note that having to use PROPFIND to retrieve the contents of a
>> collection has a serious impact on performance when ACLs are supported.
> 
> Could you a be a bit more specific? Would a PROPFIND where just the 
> member names are being returned sufficient?

Indeed, because as soon as one property is also returned an ACL check is
required for each member, which is expensive if the collection has a lot
of members, say a few thousand.

I agree it should be allowed to hide collection members if this fits
some security policy better. If I would speak as a user, however, I
probably would hide a document in a collection that is not readable. It
feels closer to real life.

> 
> Best regards, Julian
> 
> (adding to new issues to 
> <http://greenbytes.de/tech/webdav/draft-reschke-webdav-rfc2518bis-latest.html>) 

Best regards,

Werner.
-- 
Werner Donné  --  Re
Engelbeekstraat 8
B-3300 Tienen
tel: (+32) 486 425803	e-mail: werner.donne@re.be

Received on Tuesday, 15 May 2007 07:16:35 UTC