Permissions-constrained delivery of partial search results for a content management system
User permissions for a search on content managed by a content management system (CMS) can be evaluated in a search engine based on a user identity of a user providing a query input for the query rather than after return of an initial results set to the CMS or some other front-end application. The search engine can constrain possible results returned from a search for the query input using a content index of a plurality of content items maintained in a repository of the content management system. The constraining can include limiting the search engine from adding a content item of the plurality of content items to a permissions-filtered results set unless the evaluating of the user permissions and the search for the query input against the content index do not exclude the content item. Other aspects can support index updating by selective use of a metadata index.
1. A computer-implemented method comprising:
evaluating, in a search engine associated with a content management system, user permissions based on a user identity of a user providing a partial query input for a search on content managed by the content management system, the partial query input comprising a string of characters entered by the user into a search term input user interface element in a user interface presented to the user prior to an indication from the user that query inputting is completed;
constraining, by the search engine based on the evaluating of the user permissions, possible results returned from a search for the partial query input using a content index of a plurality of content items maintained in a repository of the content management system, the constraining comprising limiting the search engine from adding a content item of the plurality of content items to a permissions-filtered results set unless the evaluating of the user permissions does not exclude the content item and the search for the partial query input returns the content item;
returning, by the search engine, the permissions-filtered results set with permissions-corrected summary statistics representative of the permissions-filtered results set, the returning the permissions-filtered results set comprising presentation, in the user interface, of suggested content items based on the permissions-filtered results set for the partial query input;
dynamically generating facets for grouping the permissions-filtered results set using permissions-corrected summary statistics to calculate faceting relevant to the permissions-filtered results set.
2. A computer-implemented method as in claim 1 , further comprising using the permissions-filtered results set to identify a projected query input based on the partial query input for presentation to the user via the user interface.
3. A computer-implemented method as in claim 1 , wherein the evaluating of the user permissions based on the user identity of the user comprises a search on a user permissions index for permissions granted to the user based on the user identity.
4. A computer-implemented method as in claim 3 , wherein the user permissions index comprises an access control list index maintained by the search engine.
5. A computer-implemented method as in claim 1 , wherein the evaluating of the user permissions based on the user identity of the user comprises searching an access control list index for access control lists designating the user identity as being allowed a sufficient level of access to content items assigned to those access control lists.
6. A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform instructions comprising:
evaluating, in a search engine associated with a content management system, user permissions based on a user identity of a user providing a partial query input for a search on content managed by the content management system, the partial query input comprising a string of characters entered by the user into a search term input user interface element in a user interface presented to the user prior to an indication from the user that query inputting is completed;
constraining, by the search engine based on the evaluating of the user permissions, possible results returned from a search for the partial query input using a content index of a plurality of content items maintained in a repository of the content management system, the constraining comprising limiting the search engine from adding a content item of the plurality of content items to a permissions-filtered results set unless the evaluating of the user permissions does not exclude the content item and the search for the partial query input returns the content item;
returning, by the search engine, the permissions-filtered results set with permissions-corrected summary statistics representative of the permissions-filtered results set, the returning the permissions-filtered results set comprising presentation, in the user interface, of suggested content items based on the permissions-filtered results set for the partial query input;
dynamically generating facets for grouping the permissions-filtered results set using Permissions-corrected summary statistics to calculate faceting relevant to the permissions-filtered results set.
7. A computer program product as in claim 6 , wherein the operations further comprise using the permissions-filtered results set to identify a projected query input based on the partial query input for presentation to the user via the user interface.
8. A computer program product as in claim 6 , wherein the evaluating of the user permissions based on the user identity of the user comprises a search on a user permissions index for permissions granted to the user based on the user identity.
9. A computer program product as in claim 8 , wherein the user permissions index comprises an access control list index maintained by the search engine.
10. A computer program product as in claim 6 , wherein the evaluating of the user permissions based on the user identity of the user comprises searching an access control list index for access control lists designating the user identity as being allowed a sufficient level of access to content items assigned to those access control lists.
11. A system comprising:
computer hardware configured to perform instructions comprising:
evaluating, in a search engine associated with a content management system, user permissions based on a user identity of a user providing a partial query input for a search on content managed by the content management system, the partial query input comprising a string of characters entered by the user into a search term input user interface element in a user interface presented to the user prior to an indication from the user that query inputting is completed;
constraining, by the search engine based on the evaluating of the user permissions, possible results returned from a search for the partial query input using a content index of a plurality of content items maintained in a repository of the content management system, the constraining comprising limiting the search engine from adding a content item of the plurality of content items to a permissions-filtered results set unless the evaluating of the user permissions does not exclude the content item and the search for the partial query input returns the content item;
returning, by the search engine, the permissions-filtered results set with permissions-corrected summary statistics representative of the permissions-filtered results set, the returning the permissions-filtered results set comprising presentation, in the user interface, of suggested content items based on the permissions-filtered results set for the partial query input;
dynamically generating facets for grouping the permissions-filtered results set using permissions-corrected summary statistics to calculate faceting relevant to the permissions-filtered results set.
12. A system as in claim 11 , wherein the operations further comprise using the permissions-filtered results set to identify a projected query input based on the partial query input for presentation to the user via the user interface.
13. A system as in claim 11 , wherein the evaluating of the user permissions based on the user identity of the user comprises a search on a user permissions index for permissions granted to the user based on the user identity.
14. A system as in claim 13 , wherein the user permissions index comprises an access control list index maintained by the search engine.
15. A system as in claim 11 , wherein the evaluating of the user permissions based on the user identity of the user comprises searching an access control list index for access control lists designating the user identity as being allowed a sufficient level of access to content items assigned to those access control lists.
16. The method of claim 1 , wherein the permission-filtered search result set is generated by way of a user permissions index that correlates the user permissions with the content items to which user permissions are applicable.
17. The method of claim 16 , wherein the search engine evaluates the user permissions index against the user identity to produce a filtered list of the content items that the user is allowed to see.