Ralf Haferkamp

New reva `appauth` based middleware and service: https://github.com/owncloud/ocis/pull/9079

The main problem for the "filter by role assignment" slowness is the the settings service does currently provide no way to list all assignments for a specific role. The only...

There is PoC PR (#9363), which basically adds a cache (it's a bit of a hybrid of a cache and an index) to the settings service for quick enumeration of...

> just a spontaneous idea: for larger installations we require an external LDAP anyways, couldn't we persist role assignments in there? Certainly. But ... Depending on the usecase we currently...

One thing I forgot to add here. I also experimented with storing the assignments using the nats service. This would pretty surely improve the response times. But this is basically...

> Furthermore I don't think these scopes are of any help for the calendar and contacts integration: > > https://github.com/owncloud/ocis/blob/afc6ed1e416c8c1abef832df3e6912b7487cccbd/vendor/github.com/cs3org/go-cs3apis/cs3/auth/provider/v1beta1/resources.pb.go#L77 > > We need a scope like `calendar.Read` `files.Read` .......

> Somehow the app auth interface is not what I am expecting. `GenerateAppPassword` is not taking the user as argument but extracts it from the context (see below) :cry: >...

> to sum it up: > > * machine auth for migration service > > * app auth for calendar, contacts and related I guess that was a misunderstanding. I...

@2403905 This doesn't build currently. I think you need to rebase you reva fork and update the vendor files.

@2403905 Now that the reva part is merged we can rebase and remove the reva replacement.