ontola / ontola/atomic-server

Admin rights check

Open
#280 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

performance server
Dominant language
TypeScript
Stars
1.6k
Forks
82
Avg merge
10h 34m
Merged PRs (30d)
205

Description

Spec discussion: https://github.com/ontola/atomic-data-docs/issues/82

When processing search or collection queries, by far the most time is spent on iterating over every resource, and recursively checking whether the user has the correct rights.

A very simple way of speeding this up, is to check if the user has some root level / admin level rights. That way, we could skip all these checks, and make things way faster.

Relates to #279

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read the spec discussion in issue #82 and the related issue #279, then inspect how search and collection queries iterate resources and recursively check rights. Done means root- or admin-level rights can bypass those checks while preserving authorization behavior for other users.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust, typescript
Domain
authorization, backend, performance
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.