[ https://issues.apache.org/jira/browse/SOLR-15073?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17270402#comment-17270402 ]
ASF subversion and git services commented on SOLR-15073: -------------------------------------------------------- Commit 9d4811e02f0d3cc4abb46ae00074c5db98c04c07 in lucene-solr's branch refs/heads/master from Christine Poerschke [ https://gitbox.apache.org/repos/asf?p=lucene-solr.git;h=9d4811e ] SOLR-15073: Fix ClassCastException in SystemInfoHandler.getSecurityInfo. Same fix as the #2210 PR commit earlier but this time not extending SystemInfoHandlerTest and also not adding a static SystemInfoHandler.getSecurityInfo variant for test use. > Unsafe cast in SystemInfoHandler > -------------------------------- > > Key: SOLR-15073 > URL: https://issues.apache.org/jira/browse/SOLR-15073 > Project: Solr > Issue Type: Bug > Security Level: Public(Default Security Level. Issues are Public) > Affects Versions: 8.6, 8.7 > Reporter: Nikolay Ivanov > Assignee: Christine Poerschke > Priority: Major > Fix For: 8.8, master (9.0) > > Time Spent: 0.5h > Remaining Estimate: 0h > > I have observed an unsafe cast inĀ > SystemInfoHandler::getSecurityInfo > Is this by design? Currently I have a custom AuthorizationPlugin that > directly implements AuthorizationPlugin interface. With the latest solr > version it is not permitted anymore. A workaround is to extend the > RuleBasedAuthorizationPluginBase, which is not ideal imo. Please share your > thoughts -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org