You could attach the doc rights to the document itself, and then index the group rights into a separate core, and then use pseudo-joins to filter them. Effectively, you would say, "find me all the groups that my user is allowed to see, then find me all documents that are in those groups, based upon the document's ACLs".
Would that work? Upayavira On Thu, Mar 21, 2013, at 08:52 AM, Christopher ARZUR wrote: > @Jan Høydahl : do you mean "cutom filter" ? > @Walter Underwood : I also agree with you, I'd only use native functions > of Solr, but I do not know how to solve my problem ... My ACLs are > composed of thousands of groups (inheritance) that have deny / allow > user rights and who themselves have deny / allow rights and these rights > may change frequently. > > I do not really see any solution to adopt, thank you for your help > > Le 20/03/2013 15:48, Walter Underwood a écrit : > > I agree. Your first step should not be trying to make Solr work they way > > your think it should. Try really hard to use the existing features, they > > are there because they solve a LOT of problems. > > > > Updates are pretty fast, really. > > > > wunder > > > > On Mar 20, 2013, at 2:36 AM, Jan Høydahl wrote: > > > >> Don't try to optimize something which is not a problem. > >> > >> This is what "everyone" does - update documents when ACLs for those > >> documents change, even with multi-million documents. It works like a > >> charm. Or do you have a special usecase where permissions for an average > >> document changes several times a day? If not, you should be fine! > >> > >> -- > >> Jan Høydahl, search solution architect > >> Cominvent AS - www.cominvent.com > >> Solr Training - www.solrtraining.com > >> > >> 20. mars 2013 kl. 10:01 skrev Christopher ARZUR > >> <christopher.ar...@cognix-systems.com>: > >> > >>> Hello and thank you for your answers. > >>> I'll try to explain my problem a little better: > >>> > >>> The goal is to manage ACLs via Solr without reindex the documents at each > >>> change of permission. I have hundreds of thousands of documents, users > >>> and groups and permissions (allow / denied) or each of these groups of > >>> these users. > >>> > >>> I read a lot of things about this and it seems that the binary compraison > >>> is the best solution ... but I may be wrong :/ > >>> > >>> To do this I saw a plugin here: > >>> https://issues.apache.org/jira/browse/SOLR-1913 with an example of this: > >>> https://docs.google.com/document/d/10HuqHkYjaEm6Q2ZrRCI0QQMLbbqtRv_NXDHcTjfCRfU/edit? > >>> fold = 1 > >>> > >>> Unfortunately I have not managed to successfully install the plugin > >>> although I followed the steps it seems ... > >>> > >>> At the moment I left on a solution that is to use dynamic boolean fields > >>> but I'm afraid to face performance issues on important volumetries in > >>> terms of documents and fees. > >>> > >>> I hope I have been more specific, I await your ideas because I'm not > >>> having chosen the right solution ... small clarification: I discovered > >>> solr only a few months ago: s > >>> > >>> Thanks, > >>> Christopher > > -- > > Walter Underwood > > wun...@wunderwood.org > > > > > > > > >
