READ PROTECTION RULES Performance impact?

RentProperty

Hi Support,

After the Multi-Tenancy video we've implemented READ PROTECT Rules on most of the important objects in one of our systems for better data security. However it seems that now the Queries take 3 or 4 times longer to load. I've checked this when the server is almost idling an the rest of the performance seems fine but opening a query takes couple of seconds to display the data even though the result set is only 20 per page.

Could this be as a result of the READ PROTECT rules? When I Log in as Admin I can run large queries and they are fast! Thats why it seems that it Must be the protection rules slowing it down. Would the protection rules use up more memory on the DB side or on the App Server side?

A typicall rule looks like this:
IF Property.Company<>LoggedInMMSAdministrator.Company THEN READ PROTECT Property FROM MMSAdministrator

I also have the 'Do not used during initialization' ticked as well as 'Do not check referred attributes'.

Has anyone else experienced this after implementing Protection rules?

kklosson

I use a number of protection rules and I don't know of any performance impact.

RentProperty

Hi Support,

We did a number of benchmarks yesterday on different queries and then I removed the Protection rules last night to check the performance again today and I can confirm that the query Loading Time is Substantially faster. Some queries took as long as 6 to 7 seconds to load yesterday. This morning it's about 1 second for the same queries with same number of loggedinUsers.

Can you please confirm if:
1) You can use ProtectionRules and LoggedIn selection arguments together or if that will have a performance impact.
2) If anything has changed in Version 6 or 7 With regards to how READ PROTECT works. This is for a 5.9 System.
3) Is there an alternative solution to also protect data other than READ PROTECT?
4) Does it make any Performance Difference whether the 'Use During Initialization' on the Protection rule is on or off? Are protection rules supposed to be used during initialization?

Thank you so much for your feedback.