TeskaLabs / seacat-auth

SeaCat Auth provides authentication, authorization, identity management, session management and other access control features.

GNU General Public License v3.0

11 stars 6 forks source link

Fix and optimize credentials search #382

Closed byewokko closed 1 week ago

byewokko commented 1 month ago

Issue

Adding the implicit tenant filter to credentials search (#348, #362) has negative performance impact because tenant and role assignments are loaded into memory. This can even crash the service container.
The filters may not be combined correctly - filtering by tenant blocks filtering by username.

Solution

[ ] Do not load large bulks of data (tenant and role assignments) into memory.
[ ] Make sure the filters properly combine (AND operation) and do not block each other.
[ ] Use function composition (e.g. iterator = tenant_filter(role_filter(iterate_credentials(match_string)))) or some chunking.