ACL security in Solr

[Anders Rask <an...@gmail.com>]

Hi,

I am about to start my master thesis project at the company Findwise
(http://www.findwise.se) in Stockholm. The thesis will involve Solr,
and indirectly Lucene.

My goal is to implement ACL security into Solr, possibly through a
plugin? I would like to know your thoughts on this. Has it already
been done or is someone currently working on something similar? Do
you have any thoughts on the architectural design and which data
sources that would be the easiest to start with?

I am also considering whether to implement early binding, late
binding or both (Information on early, late binding:
http://www.e2conf.com/archive/presentations/downloads/FO45_Bennett.pdf).
Since I don't have that much time I might have to settle with
implementing only one. Any thoughts on which of these methods to
prefer?


Best regards,
Anders Rask

Re: ACL security in Solr

[Robert Douglass <ro...@robshouse.net>]

Anders,

Drupal has an ACL implementation, called apachesolr_nodeaccess. It is  
an integration of Drupal's ACLs into Solr, and might be interesting  
for you to look at:


http://cvs.drupal.org/viewvc.py/drupal/contributions/modules/apachesolr/contrib/apachesolr_nodeaccess/?pathrev=DRUPAL-6--1

http://drupal.org/project/apachesolr

http://drupal.org/node/230383


Robert Douglass

The RobsHouse.net Newsletter: http://robshouse.net/newsletter/robshousenet-newsletter
Follow me on Twitter: http://twitter.com/robertDouglass

On Jan 29, 2009, at 3:22 PM, Anders Rask wrote:

> Hi,
>
> I am about to start my master thesis project at the company Findwise
> (http://www.findwise.se) in Stockholm. The thesis will involve Solr,
> and indirectly Lucene.
>
> My goal is to implement ACL security into Solr, possibly through a
> plugin? I would like to know your thoughts on this. Has it already
> been done or is someone currently working on something similar? Do
> you have any thoughts on the architectural design and which data
> sources that would be the easiest to start with?
>
> I am also considering whether to implement early binding, late
> binding or both (Information on early, late binding:
> http://www.e2conf.com/archive/presentations/downloads/FO45_Bennett.pdf) 
> .
> Since I don't have that much time I might have to settle with
> implementing only one. Any thoughts on which of these methods to
> prefer?
>
>
> Best regards,
> Anders Rask