API efficiency and Custom Conditions

[DMehaffy]

@sparebytes

Are API queries efficient? What happens in a big data and traffic case? Do you have any benchmarks/tests? I ask especially because of the many nested relations you allow and you return them all in the API response…

I will be unfront and honest, currently no. We took way too many short cuts regarding efficiency; we have identified that pain point and have already dedicated almost an entire quarter of 2021 to making the needed changes to that (Q3 2021): https://portal.productboard.com/strapi/1-roadmap/c/73-database-layer-v4

@sparebytes

API: How many results are returned by default in the nested relations. For example 1000 posts with 10000 comments each. By default it would return 100 posts unless I limit it in the query. How many nested relationship results would return though? Is there a way to limit those? For example 10 posts with 5 comments… then i can retrieve the rest of the comments fo that post from the comments API… no need 10000 to be nested. Is that how it works?

There was a recent bug report on GitHub about this to determine the expected logic, exploration is currently ongoing: graphql connection not returning correct results anymore · Issue #9146 · strapi/strapi · GitHub

@sparebytes

I see the roles/permissions section. It all looks cool, however I can see in the conditions you have 2 options available. When is the creator or when the role is equal to the creator… Is there any way to add more conditions? For example that he is connected to the creator… Has subscribed to the creator? Or other custom condition… For example a payments table that holds you have paid for an entry… profileId, paidForId so when you have paid for that reference ID you have access to it… Whether that’s a profile you have paid for or an asset or another XXX table entry…

The RBAC (Role-based access control) and it’s conditionals aren’t entirely customizable in the CE edition and many of these features require an enterprise license (even the bronze). We understand there might be some frustration regarding this and have opened a forum thread to gather feedback:

RBAC - Role based access control feature discussion

Related to the GitHub issue: https://github.com/strapi/strapi/issues/8270 I’m opening this thread to promote community discussion related to the RBAC feature, as this was released before we had the forums, I wanted to ensure our community voice was clearly heard. Please feel free to give whatever feedback you would like, just remember to keep it constructive and in line with our Code of Conduct. Looking forward to hearing what you think.