User Guide

Caching Advanced Security Information 91
Caching Advanced Security Information
Caching Advanced Security information can greatly improve performance within
your ColdFusion applications. The ColdFusion Administrator provides the following
Advanced security caches:
• Security Server Policy Store Cache caches Advanced security information. You
can load this cache at startup. By default, it is notified of administrative changes
to the policy store once every minute. The information stored in this cache is
used to determine if a user is authorized for a resource. When this information is
cached, ColdFusion doesn’t have to make database calls to determine this. The
result is that performance is greatly improved without requiring a lot of
information to be cached . Using this cache provides the most noticeable
performance improvements with Advanced security.
• Security Server Authorization Cache caches each unique
isAuthorized call.
Since each
isAuthorized call is tied to the user who made the call, the number of
cached entries grows quickly in an application that has many users. Because the
high overhead of this cache can dampen its performance improvements, you’re
better off using the Security Server Policy Store Cache if you anticipate heavy
usage of your protected applications.
• ColdFusion Server Cache caches isAuthorized and isProtected requests. The
advantage of using this cache is it operates in the ColdFusion App server process
space so there is no interprocess call for cached request.
To learn how to configure Advanced security caches, see “Setting Up a Security
Server” on page89.