Skip to content

Expire cached user IDs that can see the performance after 5 minutes

What does this MR do?

It update the cached user IDs that are allowed to display the performance bar to expire after 5 minutes.

Are there points in the code the reviewer needs to double check?

I think 5 minutes is a good middle-ground between performance and security. Also, at any time the feature can still be completely disabled in the Admin.

Why was this MR needed?

If we don't expire the cached user IDs, the list of IDs would become outdated when a new member is added, or when a member ios removed from the allowed group.

Does this MR meet the acceptance criteria?

Merge request reports