Skip to content

perf(auth): Skip full organization hydration during access checks - #124849

Open
shashjar wants to merge 1 commit into
shashjar/iswf-3361-active-resource-idsfrom
shashjar/iswf-3361-lightweight-access
Open

shashjar wants to merge 1 commit into
shashjar/iswf-3361-active-resource-idsfrom
shashjar/iswf-3361-lightweight-access

Conversation

@shashjar

@shashjar shashjar commented Sep 17, 2026 •

Copy link
Copy Markdown
Member

Refs https://linear.app/getsentry/issue/ISWF-3361/determine-access-hydrates-every-project-and-team-on-31percent-of-all.

Access checks now request organization/member context without hydrating every project and team, including demo permissions and delegated superuser access. Privileged RPC-backed access resolves active project and team IDs independently on first use and caches each set for that access object. This removes full model serialization while preserving project visibility, membership semantics, and delegated scope/expiry checks.

This also fixes empty privileged resource-ID sets on callers that already supply lightweight contexts, such as organization integrations.

@linear-code

linear-code Bot commented Sep 17, 2026

Copy link
Copy Markdown

ISWF-3361

@github-actions github-actions Bot added the Scope: Backend Automatically applied to PRs that change backend components label Sep 17, 2026
@shashjar
shashjar force-pushed the shashjar/iswf-3361-lightweight-access branch 2 times, most recently from 1eb9129 to ecc1d43 Compare September 17, 2026 23:02
@sentry

sentry Bot commented Sep 17, 2026 •

Copy link
Copy Markdown
Contributor

Sentry Snapshot Testing

Name Added Removed Changed Renamed Unchanged Skipped Status
sentry-frontend
sentry-frontend
0 0 0 0 760 0 ✅ Unchanged

⚙️ sentry-frontend Snapshot Settings

@shashjar
shashjar added this pull request to stack #125109 September 21, 2026 19:50
@getsantry

getsantry Bot commented Oct 15, 2026

Copy link
Copy Markdown
Contributor

This issue has gone three weeks without activity. In another week, I will close it.

But! If you comment or otherwise update it, I will reset the clock, and if you remove the label Waiting for: Community, I will leave it alone ... forever!


"A weed is but an unloved flower." ― Ella Wheeler Wilcox 🥀

@getsantry getsantry Bot added the Stale label Oct 15, 2026
@shashjar

Copy link
Copy Markdown
Member Author

WIP

@shashjar shashjar removed the Stale label Oct 15, 2026
@shashjar
shashjar force-pushed the shashjar/iswf-3361-lightweight-access branch from ecc1d43 to 71c6e8a Compare October 21, 2026 21:25
Fetch project and team IDs lazily for RPC-backed global access, allowing permission contexts to omit full resource collections. Preserve active-resource filtering and request-local caching.

Refs ISWF-3361
@shashjar
shashjar force-pushed the shashjar/iswf-3361-lightweight-access branch from 71c6e8a to 5d4108d Compare October 21, 2026 22:11
@shashjar
shashjar marked this pull request as ready for review October 21, 2026 22:15
@shashjar
shashjar requested review from a team as code owners October 21, 2026 22:15
@shashjar
shashjar removed request for a team October 21, 2026 22:15

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Scope: Backend Automatically applied to PRs that change backend components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant