topic Re: search without acl in Alfresco Archive

search without acl

ale — Mon, 29 Oct 2007 18:03:51 GMT

i need to develop a kind of fast search service. the ideal situation is:a group Xa space Y group X can see all documents in space Y so i don't want to care about ACL when searching - the main goal is: "it has to be super fast".i tried creating a bean that link "fileFolderService" becouse i saw that

Re: search without acl

mark_smithson — Tue, 30 Oct 2007 07:52:37 GMT

The ACLs are applied in an aspect.

Normally search are performed by getting a search service from the serviceRegistry. It you search using this, then ACLs are applied. Internally this search service delegates to the bean "indexerAndSearcherFactory". If you get a searcher from that then the ACLs will not be applied.

SearchService searcher = indexerAndSearcherFactory.getSearcher(storeRef, !params.excludeDataInTheCurrentTransaction());
results = searcher.query(params);‍‍

We saw a reduction in times from 2-3 seconds to 10-20ms for the searches we were performing.

Re: search without acl

ale — Tue, 30 Oct 2007 09:07:29 GMT

thank you very much! from 2-3 secs to 20-30 millis is a great improvement!

i hoped in a higher level service but i'll work on that.

thank you again for "it's in an aspect" suggestion - if you have more informations about it they are welcome!

Re: search without acl

ale — Tue, 30 Oct 2007 11:51:52 GMT

in the end i made a very simple test. i created a space with 500 docs and perform a simple search like "give me all first level children" using:

fileFolderService.listFiles and then calling getName
searchService.selectNodes and then calling nodeService.getProperty for name (searchService=indexerAndSearcherFactory.getSearcher)
searchService.query (filtering on type and primary parent) and then calling nodeService.getProperty for name (searchService=indexerAndSearcherFactory.getSearcher)

the components i linked to my bean are:

"fileFolderService"
"indexerAndSearcherFactory"

then i create two users: "test" that can see all documents in the space and "guesttest" that can see ONLY one document.

using "guesttest" (first call, to be sure the cache is empty)

fileFolderService.listFiles i get 501 results in about 4 secs
searchService.selectNodes i get 501 results in about 3,5 secs (50 millis without nodeService.getProperty )
searchService.query i get 501 results in about 4 secs (75 millis without nodeService.getProperty )

so i suppose no ACLs are applied using these services.

just to test, if i link "FileFolderService" (the public one) as fileFolderService i get 1 result in 13 secs the first call!

hope this helps

ciao,

Re: search without acl

mark_smithson — Tue, 30 Oct 2007 13:43:58 GMT

75 millis without nodeService.getProperty Smile

Yes - there is a difference between getting a property value from the node service, this accesses the DB and may apply ACLs again to just getting an indexed property value from the search results.

Re: search without acl

andy — Thu, 08 Nov 2007 09:58:01 GMT

Hi

Bean names starting with an upper case include transaction and security interceptors, others do not. So ….

SearchService - applies acls
searchService - does not
NodeService - applies acls
nodeService - does not
…

Remember to wrap calls in User transactions to beans that do not have a TX wrapper.

Andy

Re: search without acl

ale — Thu, 08 Nov 2007 10:45:29 GMT

I can't understand why unsing faces beans ACL are applied even if they link nodeService instead of NodeService (if i'm not wrong).

caio,