nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Group/ACL Architecture.

shcha1

Hi all.

I'm finding good solution how i do architect Group/ACL..

1. All documnets need each different security.
2. Each file has 5 kinds of groups.

(The groups are only for the file - ex:Approval group of file, Writing group of file......)
3. This customer is global company, so numerous files will be import to the documentum.

I'm worry about performance of system. Becasue there are so many groups(file*5) in the system.

Is there any good idea ?

Please reply.

Thanks.

Find more posts tagged with

Note:

If there are Accepted Answers, those will be shown by default. You can switch to 'All Replies' by selecting the tab below.

Button

Accepted answers

rawat_harish

The number of files or number of acl's in the system will not cause any performance degradation. Only when a user ends up belonging to too many groups you will see some performance degradation.

I do not have any hard data on this, but I think you should do some quick tests to validate this

Thanks

Harish

All comments

Jit

I would like to know that, are you creating Groups dynamically for each file through your application?

Thanks

rawat_harish

Instead of creating groups - can you create acl's for each file? And when a new user is assigned to work on a file, you can modify the acl thru a workflow or a method or privileged bof ...

Btw how many users are typically assigned to work on a file?

Thanks

Harish

shcha1

Of course. I know it can dynamically create group using DFC.

No problem to have so many groups in the system ?

I heard that so many groups is really not good for performance for system. right?

rawat_harish

In general more groups are bad for performance. If at all possible avoid creating too many groups.

Thanks

Harish

shcha1

Thanks for reply.

I'm developing this system by DFC on Flex now ( not using WDK)

And each fils has 5 kinds of unique group and the group will be assigned about 5~6 memebers.

Of course one person can assign several groups in the file.

ex)

A file > Agroup1 > person1,person2,person3,person4,person5 ==> read

> Agroup2 > person1,person2,person3 ==> delete

> Agroup3 > person4,person5 ==> version

> Agroup4 > person2,person3 ==> browse

> Agroup5 > person2,person3 ==> read

B file > Bgroup1 > person1,person2,person3,person4,person5 ==> read

> Bgroup2 > person1,person2,person3 ==> delete

> Bgroup3 > person4,person5 ==> browse

> Bgroup4 > person2,person3 ==> browse

> bgroup5 > person2,person3 ==> version

If it is and so many files(more than 1,000,000) are in documentum, system performance is problem ?

rawat_harish

The number of files or number of acl's in the system will not cause any performance degradation. Only when a user ends up belonging to too many groups you will see some performance degradation.

I do not have any hard data on this, but I think you should do some quick tests to validate this

Thanks

Harish

shcha1

Harrish. Thanks a lot for reply.

I will try to validate this.