Permissions-constrained dynamic faceting of search results in a content management system

A computer implemented system comprising one or more processors configured to perform instructions comprising:

• evaluating, in a search engine associated with a content management system, user permissions based on a user identity of a user providing a query input for a search on content managed by the content management system;
• constraining, by the search engine based on the evaluating of the user permissions, possible results returned from a search for the query input using a content index of a plurality of content items maintained in a repository of the content management system, the constraining comprising limiting the search engine, without post search engine processing, from adding a content item of the plurality of content items to a permissions-filtered results set unless the evaluating of the user permissions does not exclude the content item and the search for the query input returns the content item;
• returning, by the search engine, the permissions-filtered results set with permissions-corrected summary statistics representative of the permissions-filtered results set, the returning comprising dynamically generating facets for grouping the permissions-filtered results set according to one or more faceting criteria by use of the permissions-corrected summary statistics to calculate faceting relevant to the permissions-filtered results set, wherein the one or more faceting criteria is determined based on the content associated with the plurality of content items;
• and
• providing an option to select from among a dynamically determined faceted criteria instead of a faceted criteria determined prior to a dynamic determination of the faceted criteria.

A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform instructions comprising:

• evaluating a query input received from a user to search content managed by a content management system, the content being searchable using a content index configured for indexing the content and a metadata index configured for indexing metadata associated with content items associated with the indexed content;
• determining user permissions by searching a user permissions index implemented as an access control list index for one or more access control lists;
• without post search engine processing, generating a permissions-filtered results set that includes at least a threshold number of content items that satisfy the query input and excludes content items that fail to satisfy the user permissions identified in the access control list index;
• returning the permissions-filtered results set by dynamically generating facets for grouping the permissions-filtered results set according to one or more faceting criteria, wherein the dynamically generating comprises using permissions-corrected summary statistics to calculate faceting relevant to the permissions-filtered results set;
• and
• providing an option to select from among a dynamically determined faceted criteria instead of a faceted criteria determined prior to a dynamic determination of the faceted criteria;
• wherein the permissions-corrected summary statistics identify correct ranges of one or more parameters characteristic of the permissions-filtered results set and correct counts of content items occurring within various ranges of the one or more parameters.