Hi,
I create a GSIP to handle the mix of tile caching with advanced security subsystems like GeoFence and ACL (or the many custom ones that are installation specific).
The work is really mostly a bug fix, currently GWC would just cache tiles ignoring security restrictions, and other users would see the tiles cached by the first user creating one.
Still, it’s complex enough that I wanted to pin down a design, and also describe the difficulties in eager tile removal when security rules change (hence the suggestion to just use disk quota, in this scenario).
Cheers
Andrea