Permissions-constrained dynamic faceting of search results in a content management system
User permissions for a search on content managed by a content management system (CMS) can be evaluated in a search engine based on a user identity of a user providing a query input for the query rather than after return of an initial results set to the CMS or some other front-end application. The search engine can constrain possible results returned from a search for the query input using a content index of a plurality of content items maintained in a repository of the content management system. The constraining can include limiting the search engine from adding a content item of the plurality of content items to a permissions-filtered results set unless the evaluating of the user permissions and the search for the query input against the content index do not exclude the content item. Other aspects can support index updating by selective use of a metadata index.
1. A computer-implemented method comprising:
evaluating, by a search engine, a query input received from a user to search content managed by a content management system, the content being searchable by the search engine using a content index configured for indexing the content and a metadata index configured for indexing metadata associated with content items associated with the indexed content, the metadata identifying updates made to a content item even if content in the content item remains unchanged;
determining user permissions for the user based on the user's identity and by searching a user permissions index implemented as an access control list index for one or more access control lists, the access control list index maintained in the search engine to identify user access to the content items;
generating a permissions-filtered results set that includes at least a threshold number of content items that satisfy the query input based on information in the content index, but excludes content items that fail to satisfy user permissions identified in the access control list index without a need for any post search engine processing; and
returning, by the search engine, the permissions-filtered results set with permissions-corrected summary statistics representative of the permissions-filtered results set, the returning comprising dynamically generating facets for grouping the permissions-filtered results set according to one or more faceting criteria, the dynamically generating comprising use of the permissions-corrected summary statistics to calculate faceting relevant to the permissions-filtered results set,
the permissions-corrected summary statistics identifies correct ranges of one or more parameters characteristic of the permission-filtered results set and correct counts of content items occurring within various ranges of the one or more parameters with a correct distribution of content items having faceted criteria relative to the summary statistics returned by the search engine, the faceted criteria being dynamically determined based at least in part on content or metadata associated with the content items that satisfy the query input, the user being provided with the option to select a dynamically determined faceted criteria, instead of a faceted criteria determined prior to the dynamic determination of the faceted criteria.
2. The computer-implemented method as in claim 1 , wherein the evaluating of the user permissions based on the user identity of the user comprises a search on the user permissions index for permissions granted to the user based on the user identity.
3. The computer-implemented method as in claim 1 , wherein the evaluating of the user permissions based on the user identity of the user comprises searching the access control list index for access control lists designating the user identity as being allowed a sufficient level of access to content items assigned to those access control lists and wherein the permissions-corrected summary statistics are produced by the search engine.
4. The computer-implemented method as in claim 1 , wherein the query input comprises a partial query input comprising a string of characters entered by the user into a user interface element in a user interface presented to the user and using the permissions-filtered results set to identify a projected query input based on the partial query input.
5. The computer-implemented method as in claim 4 , wherein a partial query input is associated with a plurality of projected query inputs, such that a projected query input is presented at a higher rank than other projected query inputs, in response to determining that the projected query results in a list of content most recently accessed by the user.
6. A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform instructions comprising:
evaluating, by a search engine, a query input received from a user to search content managed by a content management system, the content being searchable by the search engine using a content index configured for indexing the content and a metadata index configured for indexing metadata associated with content items associated with the indexed content, the metadata identifying updates made to a content item even if content in the content item remains unchanged;
determining user permissions for the user based on the user's identity and by searching a user permissions index implemented as an access control list index for one or more access control lists, the access control list index maintained in the search engine to identify user access to the content items;
generating a permissions-filtered results set that includes at least a threshold number of content items that satisfy the query input based on information in the content index, but excludes content items that fail to satisfy user permissions identified in the access control list index without a need for any post search engine processing; and
returning, by the search engine, the permissions-filtered results set with permissions-corrected summary statistics representative of the permissions-filtered results set, the returning comprising dynamically generating facets for grouping the permissions-filtered results set according to one or more faceting criteria, the dynamically generating comprising use of the permissions-corrected summary statistics to calculate faceting relevant to the permissions-filtered results set,
the permissions-corrected summary statistics identifies correct ranges of one or more parameters characteristic of the permission-filtered results set and correct counts of content items occurring within various ranges of the one or more parameters with a correct distribution of content items having faceted criteria relative to the summary statistics returned by the search engine, the faceted criteria being dynamically determined based at least in part on content or metadata associated with the content items that satisfy the query input, the user being provided with the option to select a dynamically determined faceted criteria, instead of a faceted criteria determined prior to the dynamic determination of the faceted criteria.
7. The computer program product as in claim 6 , wherein the evaluating of the user permissions based on the user identity of the user comprises a search on the user permissions index for permissions granted to the user based on the user identity.
8. The computer program product as in claim 6 , wherein the evaluating of the user permissions based on the user identity of the user comprises searching an access control list index for access control lists designating the user identity as being allowed a sufficient level of access to content items assigned to those access control lists.
9. The computer program product as in claim 6 , wherein the query input comprises a partial query input comprising a string of characters entered by the user into a search term input user interface element in a user interface presented to the user.
10. The computer program product as in claim 9 , wherein the operations further comprise using the permissions-filtered results set to identify a projected query input based on the partial query input.
11. A system comprising:
computer hardware configured to perform instructions comprising:
evaluating, by a search engine, a query input received from a user to search content managed by a content management system, the content being searchable by the search engine using a content index configured for indexing the content and a metadata index configured for indexing metadata associated with content items associated with the indexed content, the metadata identifying updates made to a content item even if content in the content item remains unchanged;
determining user permissions for the user based on the user's identity and by searching a user permissions index implemented as an access control list index for one or more access control lists, the access control list index maintained in the search engine to identify user access to the content items;
generating a permissions-filtered results set that includes at least a threshold number of content items that satisfy the query input based on information in the content index, but excludes content items that fail to satisfy user permissions identified in the access control list index without a need for any post search engine processing; and
returning, by the search engine, the permissions-filtered results set with permissions-corrected summary statistics representative of the permissions-filtered results set, the returning comprising dynamically generating facets for grouping the permissions-filtered results set according to one or more faceting criteria, the dynamically generating comprising use of the permissions-corrected summary statistics to calculate faceting relevant to the permissions-filtered results set,
the permissions-corrected summary statistics identifies correct ranges of one or more parameters characteristic of the permission-filtered results set and correct counts of content items occurring within various ranges of the one or more parameters with a correct distribution of content items having faceted criteria relative to the summary statistics returned by the search engine, the faceted criteria being dynamically determined based at least in part on content or metadata associated with the content items that satisfy the query input, the user being provided with the option to select a dynamically determined faceted criteria, instead of a faceted criteria determined prior to the dynamic determination of the faceted criteria.
12. The system as in claim 11 , wherein the evaluating of the user permissions based on the user identity of the user comprises a search on the user permissions index for permissions granted to the user based on the user identity.
13. The system as in claim 11 , wherein the evaluating of the user permissions based on the user identity of the user comprises searching an access control list index for access control lists designating the user identity as being allowed a sufficient level of access to content items assigned to those access control lists.
14. The system as in claim 11 , wherein the query input comprises a partial query input comprising a string of characters entered by the user into a search term input user interface element in a user interface presented to the user.