# Cache for insufficient privileges request logs for the /doc endpoint # # Cache Keys: username strings # Cache Values: InvalidRequestLog objects appian.cacheattributes.cacheName=insufficientPrivilegesRequestLogByUsername appian.cacheattributes.distributionMode=LOCAL_WITH_DISTRIBUTED_CLEAR appian.cache.metrics.collectFullMetrics=false # Cache algorithm used. Default in Appian is LIRS. appian.cacheattributes.MemoryCacheName=com.appiancorp.cache.JavaCachingSystemLirs # Maximum number of cached objects at any given time # Justification: This cache will have an entry for each unique user that hits the /doc endpoint # for a doc that they don't have privileges to access. This should be a relatively small fraction # of users on a system. Furthermore, the goal is to prevent people from repeatedly hitting the endpoint # to find docs with misconfigured security. These attackers would be making enough requests to remain # in the cache through replacement. So, the limit can be a tiny fraction of the total number of users. appian.cacheattributes.MaxObjects=500 # Background memory shrinkage (active eviction) DO NOT DISABLE #33524 appian.cacheattributes.ShrinkerIntervalSeconds=3600 appian.cacheattributes.MaxMemoryIdleTimeSeconds=7200