[jira] [Resolved] (SOLR-12042) Authorization rules do not work as expected.

["Jan Høydahl (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SOLR-12042?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jan Høydahl resolved SOLR-12042.
--------------------------------
    Resolution: Not A Bug

Closing as misconfiguration. This is proven to work.

A tip is to try the new Admin UI for editing security.json.

> Authorization rules do not work as expected.
> --------------------------------------------
>
>                 Key: SOLR-12042
>                 URL: https://issues.apache.org/jira/browse/SOLR-12042
>             Project: Solr
>          Issue Type: Bug
>          Components: Authentication
>    Affects Versions: 6.6.2
>         Environment: SolrCloud, Linux.
>            Reporter: Nikolay Martynov
>            Priority: Major
>
> Authentication rules do not work as expected: more permissions are given than desired.
> This is an example of security.json:
> {noformat}
> {
>  "authentication":{
>    "blockUnknown":false,
>    "class":"solr.BasicAuthPlugin",
>    "credentials":{"admin":"XvyR9ddaDk/kVNBrhJHkeWhqTFQ2uAsv8tDOmkSDwkg= 3EiRiSQVKYnGDgOwBoY6NJNlOcoRuYZOoUMYB9hgpGw="},
>    "":{"v":56}},
>  "authorization":{
>    "class":"solr.RuleBasedAuthorizationPlugin",
>    "user-role":{"admin":["admin"]},
>    "":{"v":66},
>    "permissions":[
>      {
>        "name":"read",
>        "role":null,
>        "index":1},
>      {
>        "path":"/admin/info/system",
>        "collection":null,
>        "role":null,
>        "index":2},
>      {
>        "name":"all",
>        "role":"admin",
>        "index":3}]}}
> {noformat}
> With this not authentication is required to create or delete collection.
> If one removes second rule (one with path) then authentication is required to create or destroy collection.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org