Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-13268

Initial authz eval request for a given realm takes a long time when there are many policies

    XMLWordPrintable

    Details

      Description

      Bug description

      An initial authorisation evaluation request to the policy endpoint takes a long time to respond when there are many policies. This can result in a client timing out.

      How to reproduce the issue

      1. create many policies under a given realm, somewhere in the region of a few thousand should do
      2. restart am
      3. hit the policy evaluation endpoint for the first time and note the delayed response time
      4. further requests should response in good time
      Expected behaviour

      Response time should not fluctuate for multiple requests for the same resource

      Code analysis

      IndexTreeServiceImpl has a cache of policy index trees. This cache is only populated at the point of request, so not consume more memory than necessary. It's this initial load and creation of an index tree that can result in long delays.

        Attachments

          Issue Links

            Activity

              People

              tom.elliott Tom Elliott [X] (Inactive)
              apforrest Andrew Forrest
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: