From 6c97df764c1bedd1e302fd8fd88e6cebc924de6a Mon Sep 17 00:00:00 2001
From: Ralf Becker <RalfBecker@outdoor-training.de>
Date: Thu, 6 Apr 2017 09:47:52 +0200
Subject: [PATCH] do NOT store Acl data in session, as it can be quite huge

---
 api/src/Acl.php | 28 +++++++++++++++++++++++-----
 1 file changed, 23 insertions(+), 5 deletions(-)

diff --git a/api/src/Acl.php b/api/src/Acl.php
index ab771cf302..fb23776f98 100644
--- a/api/src/Acl.php
+++ b/api/src/Acl.php
@@ -29,16 +29,12 @@ class Acl
 	 * @var int $account_id the account-id this class is instanciated for
 	 */
 	var $account_id = 0;
-	/**
-	 * @var $account_type
-	 */
-	var $account_type;
 	/**
 	 * @var array $data internal repository with acl rows for the given app and account-id (incl. memberships)
 	 */
 	var $data = Array();
 	/**
-	 * internal copy of the db-object
+	 * internal reference to global db-object
 	 *
 	 * @var Db
 	 */
@@ -84,6 +80,28 @@ class Acl
 		{
 			$this->account_id = get_account_id((int)$account_id,@$GLOBALS['egw_info']['user']['account_id']);
 		}
+		$this->data = array();
+	}
+
+	/**
+	 * Magic method called before object get serialized
+	 *
+	 * We only store account_id class is constructed for (not data, which can be huge!) and
+	 * get_rights calls read_repository automatic, if data is empty.
+	 */
+	function __sleep()
+	{
+		return array('account_id');
+	}
+
+	/**
+	 * Magic method called after object get unserialized
+	 *
+	 * We call __construct to get reference to db again and initialize data emtpy
+	 */
+	function __wakeup()
+	{
+		$this->__construct($this->account_id);
 	}
 
 	/**************************************************************************\