search

TireSwingSoftware / openassign-server

OpenAssign server intended for use by a separate client via RPC
BSD 3-Clause "New" or "Revised" License
6 stars 2 forks source link

Authorize view methods by method call #138

Open jc0n opened 12 years ago

jc0n commented 12 years ago

View methods can be made significantly faster by authorizing by method call rather than authorizing every object in the result set. This is particularly applicable for administrator only views. The rational is that the caller should be able to complete the entire view so long as they are authorized. In this case, authorizing just the method call is sufficient.

jc0n commented 12 years ago

I'm going to unassign myself because this isn't a priority right now. However, its probably a good idea to keep in mind for new views.