Compiled Access Control Table for Content Management Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In content management systems, the repetitive access to multiple system tables for authorization processes leads to significant runtime overhead, affecting performance due to the need to check user privileges and access control lists for each operation.
Innovation Solution
A method that compiles access control information from multiple tables into a single access control list (ACL) table, allowing users to be authorized by referencing this single table, which is incrementally refreshed in response to changes, thereby reducing repetitive access and maintaining data security and currency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the system checks user privilege sets and access control lists for each operation, then data security is maintained, but runtime overhead increases and performance deteriorates
Solution Approach 1:
The system pre-compiles access control information from multiple tables (user privilege sets, group privileges, access control lists) into a single pre-computed access control table before runtime operations. This preliminary compilation eliminates the need for repetitive joins and checks during actual data access operations, significantly reducing runtime overhead while maintaining security through the pre-validated access control rules
Solution Approach 2:
The access control information is segmented into distinct tables (user privilege sets, group privileges, access control lists) for independent management and updates, then combined into a compiled access control table. This segmentation allows individual tables to be updated without requiring full re-compilation, enabling incremental refreshes that maintain performance benefits while adapting to changing access control requirements
2Reliability
If multiple system tables are accessed repetitively for authorization, then comprehensive access control is achieved, but runtime overhead increases
Solution Approach 1:
Multiple access control tables (user privilege sets, group privileges, access control lists) are merged into a single compiled access control table that contains pre-computed authorization results. This consolidation reduces multiple sequential table accesses and joins into a single table lookup operation during runtime, dramatically reducing the time required for authorization checks while maintaining comprehensive access control through the integrated data structure
3Loss of information
If the access control table is fully refreshed whenever changes occur, then data currency is maintained, but system performance and administration operations are impacted
Solution Approach 1:
Instead of performing a full refresh of the entire access control table whenever changes occur, the system implements incremental refreshes that update only the affected portions of the table. When user privilege sets, group privileges, or access control lists change, only the specific rows or sections impacted by the change are re-computed and inserted into the compiled access control table, maintaining data currency while minimizing the performance impact on administration operations
Data Source
AI summary
A method, computer program product, and system for improving the operation and management of a content management system, by managing data security and incremental refreshes of a compiled access control table. A user may be authorized to access an entity such as a data item by reference to a single table that compiles ACL information from a plurality of tables, without repetitive access to several system tables.