launchpad-dev team mailing list archive

[Julian Edwards <julian.edwards@xxxxxxxxxxxxx>]

On Wednesday 26 May 2010 15:00:50 Bjorn Tillenius wrote:
> On Wed, May 26, 2010 at 04:51:56PM +1200, Tim Penhey wrote:
> > On Wed, 26 May 2010 10:26:33 Tim Penhey wrote:
> > > I'm sure I'll end up with more questions later.
> > 
> > And here is a real doozey.
> > 
> > In a list of branches, we have the following ACLs to check for *every*
> > branch:
> > 
> > The ACL of the target:
> >   * project
> >   * distro series source package
> >   
> >     * of which possibly any three could be private?
> > 
> > The ACL of the owner:
> >   * possibly a private team
> > 
> > The ACL of the branch itself
> > 
> > How can we do this with a single query over the branch table?
> 
> The goal is that you should be able to do this in a single query, yes.
> I'm currently investigating how that will work. Either by using
> recursive queries, or by flatten out the ACL model, copying things from
> the parent to the child, so that all you have to do is to check the ACL
> for the branch.

I think you should check out Muharem's work on Packageset ACLs.  He used DAGs 
very effectively and we might be able to generalise that work.