Performance: Optimize property retrieval and authorization checks in collection views (closes #21367)

[AndyButland]

Description

The investigation and updates from this PR came from looking into the suggestion in this issue report #21367 around optimization of retrieving pages of content for collection views.

I found a few places where we could optimize:

• Collection views often need only "system" properties (those that exists as specific fields in the node or content tables, such as name, created etc.), or, if they do need content properties, will only have a subset of them, and almost certainly small ones. So there's no need to load all properties for getting the data for this display.
• We have no need for template information for documents in this display.
• We are currently doing access checks per item, rather than batching up and authorising a page at a time.

I've addressed each of these in this PR.

Change Summary

• Optimise collection view property retrieval to only load properties configured for display
• Skip loading templates for collection view content (not needed)
• Optimise authorisation checks to batch all items in a single operation instead of per-item queries

Property Retrieval Optimization

Collection views now only load the custom properties that are configured in the list view configuration, rather than loading all properties for each content item.

Template Retrieval Optimization

Collection views now no longer retrieve template information.

Authorization Performance Optimization

Previously, FilterItemsBasedOnAccessAsync looped through each item and called HasAccessToListViewItemAsync one by one, resulting in N separate authorization calls (and potentially N separate database queries) for N items on the page.

Before (20 items on collection view page):

• 20 calls to IsDeniedAsync (per-item)
• 20 calls to load full content/media items just to check paths
• ~40+ database queries total

After:

• 1 call to FilterAuthorizedAsync (batch)
• 1 call to GetAllPaths (paths only, not full entities)
• ~2-3 database queries total

Key changes:

• ContentPermissionService and MediaPermissionService now use IEntityService.GetAllPaths() instead of loading full content/media items - we only need paths for authorization
• Added new FilterAuthorizedAccessAsync methods to permission services for batch filtering
• Added new FilterAuthorizedAsync methods to permission authorizers
• Updated ContentListViewServiceBase to use batch authorization via FilterAuthorizedKeysAsync
• Deprecated HasAccessToListViewItemAsync (scheduled for removal in V19)

Benchmarking

I ran some measurements on retrieving a page of list collection items, using a database with a collection view hosting many content items. Each item had only two properties - with more, I'd expect further benefits to the optimization around loading properties. Measurements are averages from loading a few pages one at a time, with one custom property on the collection view.

Current: 823ms
New (with property and template optimisations only): 736ms
New (with property, template and authorisation optimisation): 541ms

So around 34% improvement overall.

Testing

All existing integration tests should pass, in particular: Cannot_Get_List_View_Items_That_The_User_Does_Not_Have_Access_To which verifies the authorisation checks.

Manually should verify that the collection view loads and a hidden item is correctly restricted (I've done this).

[Copilot]

Pull request overview

This pull request optimizes collection view performance through three key improvements: selective property loading, batch authorization, and optional template loading.

Changes:

• Adds propertyAliases parameter to content retrieval methods to load only configured properties instead of all properties
• Replaces per-item authorization (N queries) with batch authorization (1-3 queries) using new FilterAuthorizedAsync methods
• Adds loadTemplates parameter (defaulting to true) to skip loading templates when not needed, particularly for collection views

Reviewed changes

Copilot reviewed 37 out of 37 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/Umbraco.Core/Services/IContentService.cs	Adds new GetPagedChildren overload with propertyAliases and loadTemplates parameters
src/Umbraco.Core/Services/ContentService.cs	Implements new GetPagedChildren overload, marks old version obsolete
src/Umbraco.Core/Services/IContentPermissionService.cs	Adds FilterAuthorizedAccessAsync for batch permission checking
src/Umbraco.Core/Services/ContentPermissionService.cs	Implements batch authorization using GetAllPaths instead of loading full content items
src/Umbraco.Core/Services/IMediaPermissionService.cs	Adds FilterAuthorizedAccessAsync for batch media permission checking
src/Umbraco.Core/Services/MediaPermissionService.cs	Implements batch media authorization, removes dependency on IMediaService
src/Umbraco.Core/Security/Authorization/IContentPermissionAuthorizer.cs	Adds FilterAuthorizedAsync interface method
src/Umbraco.Core/Security/Authorization/ContentPermissionAuthorizer.cs	Implements FilterAuthorizedAsync by delegating to permission service
src/Umbraco.Core/Security/Authorization/IMediaPermissionAuthorizer.cs	Adds FilterAuthorizedAsync interface method
src/Umbraco.Core/Security/Authorization/MediaPermissionAuthorizer.cs	Implements FilterAuthorizedAsync by delegating to permission service
src/Umbraco.Infrastructure/Services/ContentListViewServiceBase.cs	Adds FilterAuthorizedKeysAsync, extracts custom property aliases from config, uses batch authorization
src/Umbraco.Infrastructure/Services/Implement/ContentListViewService.cs	Implements FilterAuthorizedKeysAsync using content permission authorizer
src/Umbraco.Infrastructure/Services/Implement/MediaListViewService.cs	Implements FilterAuthorizedKeysAsync using media permission authorizer
src/Umbraco.Infrastructure/Services/Implement/ContentSearchServiceBase.cs	Adds propertyAliases and loadTemplates parameters to SearchChildrenAsync
src/Umbraco.Infrastructure/Services/Implement/ContentSearchService.cs	Implements new SearchChildrenAsync overload, passes parameters to ContentService
src/Umbraco.Infrastructure/Services/Implement/MediaSearchService.cs	Implements new SearchChildrenAsync overload (loadTemplates ignored for media)
src/Umbraco.Infrastructure/Persistence/Repositories/Implement/ContentRepositoryBase.cs	Adds GetPropertyCollections overload with propertyAliases filtering via SQL WHERE IN clause
src/Umbraco.Infrastructure/Persistence/Repositories/Implement/DocumentRepository.cs	Implements GetPage overload with propertyAliases and loadTemplates, filters properties at SQL level
src/Umbraco.Infrastructure/Persistence/Repositories/Implement/MediaRepository.cs	Implements GetPage overload with propertyAliases (loadTemplates ignored)
src/Umbraco.Infrastructure/Persistence/Repositories/Implement/MemberRepository.cs	Implements GetPage overload with propertyAliases (loadTemplates ignored)
src/Umbraco.Core/Persistence/Repositories/IContentRepository.cs	Adds GetPage method signature with propertyAliases and loadTemplates parameters
tests/Umbraco.Tests.Integration/Umbraco.Core/Services/ContentServiceTests.cs	Adds comprehensive tests for propertyAliases and loadTemplates parameters
Various test files	Updates calls to GetPagedChildren and GetPage with new required parameters

[AndyButland]

Thanks for the review @lauraneto - some good catches there. I've addressed your comments with the latest commits.