Consider ACL filter optimizations #48

New issue

Closed

opened 2023-03-08 23:38:10 +00:00 by snegurochka · 1 comment

snegurochka commented

2023-03-08 23:38:10 +00:00

Member

Original issue: https://github.com/nspcc-dev/neofs-s3-gw/issues/576

Part one: simplify `eacl` -> `ast` decoding by using `system` filters

Use system filters to define grantees and permissions, like

SYSTEM: permission STRING_EQUAL FULL_CONTROL
SYSTEM: group STRING_EQUAL AllUsers

These values may be used during encoding and decoding of rules

Part two: reduce number of records in `eacl`

Some EACL records may not produce behaviour changes, but they required for decoding ast. We can try to remove such records and replace then by storing extra information in system filters of EACL records.

Original issue: https://github.com/nspcc-dev/neofs-s3-gw/issues/576 ## Part one: simplify `eacl` -> `ast` decoding by using `system` filters Use system filters to define grantees and permissions, like ``` SYSTEM: permission STRING_EQUAL FULL_CONTROL SYSTEM: group STRING_EQUAL AllUsers ``` These values may be used during encoding and decoding of rules ## Part two: reduce number of records in `eacl` Some EACL records may not produce behaviour changes, but they required for decoding `ast`. We can try to remove such records and replace then by storing extra information in system filters of EACL records.