FileACL : ACL v2 Java design documentation

Desgin

!FileACLDesign!Image Added

Interface

The current ACLPlugin interface has a single authorise method, however its current format ties it to the Framing layer. The interface has been abstracted to take Actions and a new BrokerObject on which the action should be performed.

...

Examples of such optimisations are:

• Each Action could have it's own list so as to eliminate the lookup and method invocation on Entries that will never succeed.
• Each Entity could also have a list of entries attached to it that would allow quicker evaluation of the entries based on those that pertain to the given Entity
• Both of these optimisations can be applied to allow a much shorter list of Actions to be retrieved for a given Entity.