You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@geode.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2019/06/29 00:35:00 UTC
[jira] [Commented] (GEODE-6930) Lucene Functions specified using
Internal Function's required permission, will be rejected by PCC
[ https://issues.apache.org/jira/browse/GEODE-6930?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16875324#comment-16875324 ]
ASF subversion and git services commented on GEODE-6930:
--------------------------------------------------------
Commit 595fe9dc4a254912cbb16f505d6ed338837d446d in geode's branch refs/heads/feature/GEODE-6930 from zhouxh
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=595fe9d ]
GEODE-6930: Need to specify required resource permission DATA_READ for lucene user functions.
> Lucene Functions specified using Internal Function's required permission, will be rejected by PCC
> -------------------------------------------------------------------------------------------------
>
> Key: GEODE-6930
> URL: https://issues.apache.org/jira/browse/GEODE-6930
> Project: Geode
> Issue Type: Bug
> Components: lucene
> Reporter: xiaojian zhou
> Assignee: xiaojian zhou
> Priority: Major
> Labels: GeodeCommons
>
> When playing lucene app in PCC, I noticed the query is rejected by PCC with following error msg:
> 2019-06-14T10:24:29.83-0700 [APP/PROC/WEB/0] OUT Caused by: org.apache.geode.security.NotAuthorizedException: developer_jNnlmXMEdwsrmaDayfNKg not authorized for *
> This is because all the lucene functions are implementing Internal Function but forgot to override it's getRequiredPermissions method. So it requires to have ResourcePermissions.ALL to execute.
> There're following 9 lucene functions:
> WaitUntilFlushedFunction (Need READ)
> LuceneQueryFunction (Need READ)
> IndexingInProgressFunction (Need READ)
> LuceneCreateIndexFunction (used by gfsh only, no need to change)
> LuceneDestroyIndexFunction (used by gfsh only, no need to change)
> LuceneDescribeIndexFunction (used by gfsh only, no need to change)
> LuceneSearchIndexFunction (used by gfsh only, no need to change)
> LuceneListIndexFunction (used by gfsh only, no need to change)
> LuceneGetPageFunction (Need READ)
> The 5 of them are only used by gfsh, which is the real "internal function".
> The other 4 will be called by client application, so they should specify ResourcePermissions.READ.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)