This is about SharePoint 2013 On-Premise environment. We've a scenario in which certain content is authored in source site collection and published to a target site collection via cross-site publishing. The content developed is targeted for certain group of users in AD and country claim type.
We are approaching to use remote event receiver to assign item level permissions to the list in which content is stored. Problem is, the list will have content migrated from another source which has about ~7000 items as of today. If we are breaking permissions on each of them it will be around - 7000 * 5 AD groups * min. 5 countries = 1,75,000 unique permissions. SharePoint has a limit of 50,000 unique permissions per list/library.
Even if we restrict limit of AD groups and countries, the solution doesn't look scalable.
Any thoughts on what other approaches we can take to achieve item level permissions or authorization so that published articles are viewed by only people in those AD groups or with country claim. Also still not able to figure out how to give permissions for claim type from CSOM. Some ideas anyone?