Nova reads a Policy multiple times - slows down the page

[yumidevelopment]

• Laravel Version: 9.x
• Nova Version: 4.x
• PHP Version: 8.x

Description:

We have a nova installation running in production with over 50 different Models/Resources and correspoding Policies. What we are noticing is that the page is running very slow, most likely because there are many duplicate calls to the Policies. In our case over 250 calls and memory is increasing for every Policy we add.

If we remove all the Policies, page is running fast again. I went and created a fresh laravel + nova installation, adding only one model and policy and found out that there are many duplicate calls to e.g. viewAny, view and create. Am I perhaps doing something wrong?

Detailed steps to reproduce the issue on a fresh Nova installation:

• Create a fresh laravel installation
• Install Nova as described here https://nova.laravel.com/docs/4.0/installation.html
• php artisan make:model Feed --policy
• php artisan nova:resource Feed
• Add return true; in every method in FeedPolicy
• Refresh your nova dashboard and see 10 Gate calls

[crynobone]

This look correct, An index view would need to verify if user can:

• view detail
• create new record
• edit each particular record
• replicate each particular record
• delete each particular record

[shahabzebare]

@davidhemphill I see this problem in my application, I have one application that have more than 140 Resource with Policy that we have 500+ permission, Loading page with Inertia was some time take 5 to 15 S, this was make my app very slow
I solved this problem, by creating some package make lazy loading resource based on page now my application max time is 300ms,
some thing nova deal with them make application slow when scale application size not users I mean policess.
I will publish package or if you want i will make a contribution on laravel nova repository.
I don't know any one deal with nova with strong access control it face this slow problem .

[crynobone]

@shahabzebare feel free to release a package.

[webard]

@shahabzebare did you try to use once() in authorization methods? I'm curious how you solve this problem, waiting for package!

[iamx]

/**
 * Determine if the given resource is authorizable.
 *
 * @return bool
 */
public static function authorizable()
{
    return false;
}

You could skip the whole authorization of a resource with above. Not sure if that would fit your case or if anyone sees any drawback with this.

[Andrewrafat]

<3

[Andrewrafat]

💗