janhoy commented on issue #805: SOLR-13649 change the default behavior of the basic authentication plugin. URL: https://github.com/apache/lucene-solr/pull/805#issuecomment-520754094 My comment about ERROR above was related to the special case where people initialize security.json without any users, like `"authentication": {"class":"solr.BasicAuthPlugin"}`. In this case today nothing will happen since blockUnknown=false, but when we change the default, the entire cluster is completely locked for everyone. So my question was whether to allow such a config at all, or to allow configs with no users only if blockUnknown is explicitly set to false.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
