Metacat

The subpart of metacat search queries that does an access control check is inefficient. It first checks the user_owner field in xml_documents (of dubious value), and then it does two queries against xml_access to determine if the user has rights to query. The query as implemented in Metacat 1.6 is attached. Note in particular that the user_owner part of the query appears to be wrong -- at no point would the user_owner ever be 'public', so this part of the query can be omitted for public searches, avoiding a large subquery.