On the resource tool, access restrictions for groups on folders do not work

We're closing this Jira issue for now. We can reopen it if need be. Thank you.

Nope you don't want to set this to 0 as it will create a lot of extra queries to the database. A TTL cache boosts database performance by fetching the last result from the cache vs asking the database. Once the TTL (time to live) has expired then it refetches from the database and caches again. The goal of a TTL cache is a compromise between performance and an allowance of time for accuracy.

So what this cache is saying is,

Were willing to sacrifice up to 10 minutes of inaccuracy for the sake of a database performance boost.

There are other caching strategies that can be used, but this describes a TTL cache.

on sakai 11.x, I set the AUTHZ cache parameter in sakai.properties:

cacheMinutes@org.sakaiproject.authz.api.SecurityService=0

result: access restrictions for groups on folders now seem to work perfectly.

Does this mean that for versions higher than sakai 10, we need to set this cache to 0?

Regards,

I believe what this user is seeing is the effects of the SecurityCache "org.sakaiproject.authz.api.SecurityService.contentCache" TTL where if an Instructor changes the Folders permissions and the Student had already visited the site and seen the Resource prior to the Instructor changing the group permissions then they are subject to the cache timeout on the Resource, which OTB is 600 seconds / 10 minutes. After the security check on the resource has exceed the TTL the Resource's permissions are then refetched and access to the Resource is removed.

Thanks,