You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Hoss Man (JIRA)" <ji...@apache.org> on 2015/02/18 22:02:12 UTC
[jira] [Comment Edited] (SOLR-7125) Allow clients to
upload/download configs via CloudSolrClient
[ https://issues.apache.org/jira/browse/SOLR-7125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14326552#comment-14326552 ]
Hoss Man edited comment on SOLR-7125 at 2/18/15 9:02 PM:
---------------------------------------------------------
Alan: i don't know all the details, but SOLR-6915 is pretty much on point here in terms of letting solr read/write what it needs to in ZK, while some subset of users can modify configs, while other clients/users may only have read access to ZK.
just because someone can create CloudSolrClient instance and get the list of active nodes from ZK doesn't mean they can/should be allowed full write access to ZK.
----
EDIT: to clarify my point: i'm not saying we shouldn't support this in CloudSolrClient, i'm saying *if* we support it, we need to keep the security conious use case in mind and ensure we have a good story/docs for folks who care about things like SOLR-6915 ... maybe it "just works" because the ZK credentials used when constructing the CloudSolrClient instance are prevented from writing to those config nodes in these secure cases, and they returne a good error message ... but we should think about that and test it.
was (Author: hossman):
Alan: i don't know all the details, but SOLR-6915 is pretty much on point here in terms of letting solr read/write what it needs to in ZK, while some subset of users can modify configs, while other clients/users may only have read access to ZK.
just because someone can create CloudSolrClient instance and get the list of active nodes from ZK doesn't mean they can/should be allowed full write access to ZK.
> Allow clients to upload/download configs via CloudSolrClient
> ------------------------------------------------------------
>
> Key: SOLR-7125
> URL: https://issues.apache.org/jira/browse/SOLR-7125
> Project: Solr
> Issue Type: Improvement
> Reporter: Alan Woodward
> Assignee: Alan Woodward
> Priority: Minor
> Fix For: 5.1
>
> Attachments: SOLR-7125.patch
>
>
> Adding new configs to ZK is still something of a pain point. We should add some helper methods to CloudSolrClient that make this easier.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org