topic Re: why a group member that has been successfully added/deleted cannot take effect immediately? in Alfresco Forum

why a group member that has been successfully added/deleted cannot take effect immediately?

sunjian_xy — Thu, 23 Nov 2017 08:19:05 GMT

I was using the 'POST /groups/{groupId}/members' public API in ECM 5.2.g(201707-GA). I deleted a member from a group. When I query for its members immediately (less than 7~10 seconds), the deleted member was still in the query result. But after 7~10 seconds, I queried again, it was gone. The same el

Re: why a group member that has been successfully added/deleted cannot take effect immediately?

afaust — Thu, 23 Nov 2017 09:08:21 GMT

How did you query for the members? If you are doing an index-based query then this delay is somewhat by design. The index is "eventually consistent" meaning that there is a delay depending on the configured SOLR tracking CRON (default trigger every 15 seconds) between updates to the structure and updates to the index. That is why most operations that deal with authorities typically use database-bound (query) operations via the appropriate Java service APIs (or v1 ReST API), which offer guaranteed consistency.

Re: why a group member that has been successfully added/deleted cannot take effect immediately?

sunjian_xy — Fri, 24 Nov 2017 08:43:00 GMT

I queried for the members using the REST api, shown in the api-explorer. I attempted to find the implementation. which seemed to be webscript of the Respository container, implemented by JavaScript. But I was not able to go deeper enough to find out whether is based on solr or db. Thanks to your answer, I know why there is a delay.

Re: why a group member that has been successfully added/deleted cannot take effect immediately?

andy1 — Fri, 24 Nov 2017 10:42:09 GMT

With respect to permission enforcement the removal or addition of a person to a group takes effect immediately. The addition of a group to a group is done asynchronously but is typically sub second for millions of groups. It uses a two-part, in memory bridge table: user-group and group-group.There are APIs that walk the group tree but these do not scale for large number of groups. It could also

So did you remove a person from a group or a group from a group?

What was the exact request used for the query?

Andy