[jira] [Updated] (SOLR-16164) ConfigSet API returns error if untrusted user creates from _default configset

["Jan Høydahl (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SOLR-16164?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jan Høydahl updated SOLR-16164:
-------------------------------
    Fix Version/s: 9.0
                       (was: 9.1)

> ConfigSet API returns error if untrusted user creates from _default configset
> -----------------------------------------------------------------------------
>
>                 Key: SOLR-16164
>                 URL: https://issues.apache.org/jira/browse/SOLR-16164
>             Project: Solr
>          Issue Type: Bug
>      Security Level: Public(Default Security Level. Issues are Public) 
>          Components: configset-api
>    Affects Versions: 9.0
>            Reporter: Eric Pugh
>            Assignee: Kevin Risden
>            Priority: Blocker
>             Fix For: 9.0
>
>          Time Spent: 2h
>  Remaining Estimate: 0h
>
> Original title: getConfigMetadata() returns NPE if there is no metadata defined on zk node for configset
> While attempting to validate SOLR-16110, I discovered that on main, if you attempt to create a configset via the Configset API, you get a NPE.   
> Utils.fromJSON doesn't handle getting a null, and the call zkClient.getData(CONFIGS_ZKNODE + "/" + configName, null, null, true) is returning a null byte array.
> curl "http://localhost:8983/solr/admin/configs?action=CREATE&name=test&baseName=_default"



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org