Page 1 of 1

Thousands of User Groups produces very sluggish admin

Posted: Tue Feb 21, 2017 7:33 pm
by kducey
We are using Joomla 2.5 and we have an application where we need to assign unique permissions to our users, and therefore we have created over one thousand user groups. We are adding new users, and need to increase the number of groups even further.

Our site works well with one exception. When changing permissions through the administrator console, it is extremely sluggish, and sometimes will time out. Someone has looked at this issue, and discovered that Joomla will query every group when it loads and saves the user permissions.

We believe we can modify the query, and have it limit the number of groups it will query and write to the DB upon saving.

Is there anyone else who has run into this issue, or someone who has used Joomla with thousands of groups?

Thanks,
Ken

Re: Thousands of User Groups produces very sluggish admin

Posted: Tue Feb 21, 2017 7:47 pm
by dhuelsmann
This is not relate to your reported issue. Using 2.5 is very foolish. There are known issues in that series which could allow for compromise of your site. You really need to upgrade to 3.6.5.

Re: Thousands of User Groups produces very sluggish admin

Posted: Wed Feb 22, 2017 1:45 pm
by kducey
Can you please let me know what vulnerabilities you are referring to? It is not possible for us to migrate at this time. Please PM me if you want to speak offline.

Re: Thousands of User Groups produces very sluggish admin

Posted: Wed Feb 22, 2017 2:03 pm
by dhuelsmann
Go here https://developer.joomla.org/security-centre.html read pages one through 6 which will take you through the risks you are taking.

Re: Thousands of User Groups produces very sluggish admin

Posted: Wed Feb 22, 2017 3:28 pm
by itoctopus
Security issues because the use of Joomla 2.5 aside, I suspect you will have the same problem if you move to Joomla 3.6.5. The use of thousands of user groups on a Joomla website is not a recommended practice. User groups are meant to be just a few - if you have a lot, then maybe the technical aspect of why you're doing this needs to be revisited.

When you have many user groups, Joomla will silently load all these user groups on many admin pages (for permission reasons - you can confirm that by viewing the source), which will cause a slowdown on both the server side and the browser side (at one point, your browser will start crashing because of this).