[jira] [Created] (SOLR-15304) collection-admin-edit permissions should imply core-edit permission

["Mike Drob (Jira)" <ji...@apache.org>]

Mike Drob created SOLR-15304:
--------------------------------

             Summary: collection-admin-edit permissions should imply core-edit permission
                 Key: SOLR-15304
                 URL: https://issues.apache.org/jira/browse/SOLR-15304
             Project: Solr
          Issue Type: Bug
      Security Level: Public (Default Security Level. Issues are Public)
          Components: Authorization
    Affects Versions: main (9.0)
            Reporter: Mike Drob


Tested this on a recent 9x snapshot, probably applies to 8x and older as well.

If you have RuleBasedAuthorizationPlugin configured with:

{noformat}
    "permissions":[
      {
        "name":"collection-admin-edit",
        "role":"admin"
      },
      {
        "name": "all",
        "role": "none"
      }
    ]
{noformat}

then collection create commands will fail because the user does not have permission to create cores.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org