In my Application, the AccessControlService loads the Permissions for each user from a Database.
The application also provides a way to edit the corresponding database records (kind of administration Outline).
From what I have seen, the server calls the AccessControlService when a new user logs in. I assume the Permissions are cached after this.
After a modification of the database in the admin view, I somehow need to invalidate the cache.
I could imagine that the user needs to restart the client in order to have his modification on the Permission (force to refresh the Permission Cache after Log-in). But even this do not work yet.
What are the best practices? and how do I take control of the permission cache?
Just found:
* clearCache()
* clearCacheOfUserIds(String... userIds)
in the service extending IAccessControlService.
I still do not understand:
* Why isn't there any clear Cache for the user just after new log-in (restart of the client) or when the user quit the client application?
* When is the cache invalidated if none of the clear functions are called?