Authorization caching in a multithreaded object server

摘要

Systems and methods are included for accessing resource objects in a multi-threaded environment. A request is received from a requester to perform an operation with respect to a resource object, where the requested resource object has multiple associations with other objects. A determination as to whether an authorization cache entry corresponding to the requested resource object contains sufficient permission data for granting or denying the request for access to the requested resource object is made. A grant or deny of access to the requested resource object is returned when the authorization cache entry corresponding to the requested resource object contains sufficient permission data.

主权项

1. A computer-implemented method comprising:
monitoring changes to an inheritance parent network in a multi-threaded computing environment, wherein the inheritance parent network includes multiple parent objects having direct parent associations with child objects, and wherein monitoring is performed on a computing device and includes:
detecting an inheritance parent object being newly added in the computing environment;referencing an inheritance parent change queue, wherein the parent change queue is configured to hold entries for captured parent object changes, each entry including a list of one or more of the child objects; andadding an object as a child object of the detected inheritance parent object; detecting an access control change to an authorization cache, wherein detecting includes determining that an access control is being added to or deleted from an object being changed; and processing the detected access control change, wherein processing includes:
determining that an authorization cache entry exists for the object being changed; andqueuing the access control change in an association change queue for the authorization cache entry, wherein the association change queue is uniquely associated with a single thread.