[ 
https://issues.apache.org/jira/browse/SOLR-14087?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16997227#comment-16997227
 ] 

Ishan Chattopadhyaya commented on SOLR-14087:
---------------------------------------------

bq.  [~noble.paul]  Why was the location of the filestore changed from 
".filestore" to "filestore"?  Sorry but I disagree with this.  I don't recall 
us ever making a choice like this before – making a directory invisible to a 
typical directory listing.

There was some discussion, 
https://the-asf.slack.com/archives/CNMTSU970/p1576386856009700

Problem with "filestore" was that in standalone mode, no one can create a core 
called "filestore".
Problem with "$filestore" is that scripting will become a nightmare with need 
for escaping etc., esp. if someone wants to cold bootstrap some packages later 
on.
+1 to ".filestore" because "." prefix is convention for system files and in our 
case too, our ".system" collection. No user can create a core named 
".filestore", but it is understandable.

> disable package store API if -Denable.packages not set to true
> --------------------------------------------------------------
>
>                 Key: SOLR-14087
>                 URL: https://issues.apache.org/jira/browse/SOLR-14087
>             Project: Solr
>          Issue Type: Task
>      Security Level: Public(Default Security Level. Issues are Public) 
>            Reporter: Noble Paul
>            Priority: Blocker
>             Fix For: 8.4
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> Package store is only used by package manager. For better security, we can 
> disable it by default



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to