[jira] [Created] (GEODE-2605) Unable to do a Lucene query without CLUSTER:READ privilege

["Diane Hardman (JIRA)" <ji...@apache.org>]

Diane Hardman created GEODE-2605:
------------------------------------

             Summary: Unable to do a Lucene query without CLUSTER:READ privilege
                 Key: GEODE-2605
                 URL: https://issues.apache.org/jira/browse/GEODE-2605
             Project: Geode
          Issue Type: Bug
          Components: lucene, security
            Reporter: Diane Hardman


I have configured a small cluster with security and am testing the privileges I need for creating a Lucene index and then executing a query/search using Lucene. 
I have confirmed that DATA:MANAGE privilege allows me to create a lucene index (similar to creating OQL indexes).
I assumed I needed DATA:WRITE privilege to execute 'search lucene' because the implementation uses a function. Instead, I am getting an error that I need CLUSTER:READ privilege. I don't know why.

As an aside, we may want to document that all DATA privileges automatically include CLUSTER:READ as I found I could create indexes with DATA:WRITE, but could not list the indexes I created without CLUSTER:READ... go figure.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)