Add caching of graphs for ABAC filtering - #2800

Draft

arienandalibi wants to merge 6 commits into

db_v4from

Commits on Sep 11, 2026

First pass. We add an ABAC cache for the generated GraphAccessFilters, making sure to cache denials as well (except for cache config errors). The key is carefully selected to only include what's re…
arienandalibi
committed
6d5349c
Fix bug where a Claim was turned into a Var in lower_case_value
arienandalibi
committed
cb4d1b3

Commits on Sep 17, 2026

Changing cache to return a CachedView instead of a filter. Better for performance when the source graph won't be mutated much. We now keep all roles as a set because we can't merge individual filte…
arienandalibi
committed
0e59682
Update documentation, add sanity tests, add caching for static grants that don't read any claims (or probes), add tests for default edge layer behaviour
arienandalibi
committed
85e4838

Commits on Sep 21, 2026

Merge branch 'db_v4' into abac_cache
arienandalibi
committed
2f29a0e

Commits on Sep 22, 2026

Got rid of CachedView's unlayered_nodes_mask and added it in layered_mask[0].
arienandalibi
committed
a10af46