[security-dev] IdentityManager API review

[Shane Bryzak]

On 11/08/2012 11:08 PM, Bolesław Dawidowicz wrote:
> I think I'm in agreement with outcome of previous comments about API.
>
> Debate around way of creating groups is more a matter of taste in the
> end. I'm more concern at this point about implementation and explicitly
> storing group ids as I know from experience that calculating this data
> can be performance killer in case of any more sophisticated query.

We can probably implement this as "calculate once and store", and if we 
cache Groups and Roles (like I intend to) then the performance hit will 
be insignificant.