launchpad-dev team mailing list archive

[Bjorn Tillenius <bjorn@xxxxxxxxxxxxx>]

On Tue, May 25, 2010 at 10:05:28AM -0400, Gary Poster wrote:
> - Cacheing should be an increasingly important aspect of our
> performance concerns, particularly of fundamental design decisions like
> this one.  I'd like to have some thoughts and discussion on how this
> plan affects cacheing (via something like memcache).  The approach to
> searching you discuss, for instance, should be driven from, or at the
> least informed by, both user interface goals and performance concerns,
> IMO.

Sure, I'd be happy to have a chat about this.


> - From an implementation perspective, is the intent that this will
> continue to be enforced with the current security proxy mechanism?  (I
> would expect so, but I didn't see confirmation in the document.)

Yes, we will still use the security proxies, and the proxies will query
the ACL system.


> - You have this comment: "Note that in order for this to work in
> practice, giving someone access to a bug only, means that they will also
> be allowed to see basic information about the project, for example the
> project name."  That's a very good point.  What's your expected approach
> to deal with this?

I don't know yet. For this one I'm waiting for the UI mockups, and the
requirements to be clarified. It depends on whether we just want to
expose the name, so that the user can traverse to the object, expose a
small subset of project data, or give access to most data in the
project.


-- 
Björn Tillenius | https://launchpad.net/~bjornt