[
https://issues.apache.org/jira/browse/JENA-2339?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17567159#comment-17567159
]
Andy Seaborne commented on JENA-2339:
-------------------------------------
[~vtermanis] I hope you can respond to a few questions that would clarify
things for me.
Has the PR been used "for real" or is it experimental?
bq. This would require parsing of the input query (or modification of the
generated Query object) and from limited testing, a large set of FROM clauses
does not perform very well. (See same discussion as in above bullet point.)
Parsing the input query - I don't see that is a problem. The query must be
syntax checked. Generating a modified or new query is not expensive (unless you
have evidence to the contrary). How big are the graphs? How many of them are
there?
(FWIW See the GH issue for large literals which touches on handling very large
(10+ Mb) strigns in the parser)
bq. The SPARQL query, run as Fuseki user theUser, is prefixed with the
calculated set of visible graphs
Surely an approach is to improve this when passed in FROM/FROM NAME e.g. Graph
sets. (a URI that gets expanded in {{DynamicDatasets}}). It is useful outside
the security usage.
Do you need GRAPH/FROM NAMED for a query given that the named graphs are used
for security management?
> Proposal: Extension to jena-fuseki-access to support dynamic ACL
> ----------------------------------------------------------------
>
> Key: JENA-2339
> URL: https://issues.apache.org/jira/browse/JENA-2339
> Project: Apache Jena
> Issue Type: Improvement
> Components: Fuseki
> Affects Versions: Jena 4.5.0
> Reporter: Vilnis Termanis
> Priority: Major
>
> In summary: Extend jena-fuseki-access to allow the visible-graph list be
> specified at query time rather than just configuration-time, thus allowing
> services which rely on Fuseki to provide the visible graph list dynamically,
> based on external user/role/identity.
> In detail:
> See pull request [https://github.com/apache/jena/pull/1441] and [description
> of the
> what/why/how|https://github.com/vtermanis/jena/blob/dynamic-graph-restriction-extension/MOVE_ME_DynamicACL_notes.md].
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
