[ 
https://issues.apache.org/jira/browse/SOLR-1834?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12866150#action_12866150
 ] 

Karl Wright commented on SOLR-1834:
-----------------------------------

Hi Anders,
I spent an hour or so refreshing my memory as to SOLR-1834 this morning.
It appears to me that SOLR-1834 delegates specific knowledge of all document 
access tokens to SOLR-1834 repository plugins, and similarly delegates 
knowledge of user access tokens to security provider plugins.  The only thing 
that 1834 does *not* delegate is the repository-type attribute.  Thus, anything 
that plays along with 1834 must include this attribute.

It seems possible to develop SOLR-1834 repository and security provider plugins 
that would work explicitly with LCF - which basically take the code currently 
in ticket SOLR-1895 and just apply the appropriate class structure.  The only 
other necessary change would have to be to be sure documents from LCF were 
indexed with the repository-type attribute, and that is already easily done by 
adding an appropriate argument using the configuration UI.  This would yield an 
LCF "repository" and a corresponding LCF "security provider".

Is this something you would like to pursue?  The advantage I see is that folks 
who want late binding for some kinds of documents can get that in conjunction 
with LCF, using this setup, although configuration would be more complex.  I 
could readily contribute this, but it's not clear how exactly to contribute a 
patch to a patch...


> Document level security
> -----------------------
>
>                 Key: SOLR-1834
>                 URL: https://issues.apache.org/jira/browse/SOLR-1834
>             Project: Solr
>          Issue Type: New Feature
>          Components: SearchComponents - other
>    Affects Versions: 1.4
>            Reporter: Anders Rask
>         Attachments: html.rar, SOLR-1834.patch
>
>
> Attached to this issue is a patch that includes a framework for enabling 
> document level security in Solr as a search component. I did this as a Master 
> thesis project at Findwise in Stockholm and Findwise has now decided to 
> contribute it back to the community. The component was developed in spring 
> 2009 and has been in use at a customer since autumn the same year.
> There is a simple demo application up at 
> http://demo.findwise.se:8880/SolrSecurity/ which also explains more about the 
> component and how to set it up.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to