Jan Høydahl created SOLR-16944:
----------------------------------
Summary: /api/node/health should be governed by "health" permission
Key: SOLR-16944
URL: https://issues.apache.org/jira/browse/SOLR-16944
Project: Solr
Issue Type: Bug
Security Level: Public (Default Security Level. Issues are Public)
Components: security
Reporter: Jan Høydahl
Assignee: Jan Høydahl
The /solr/admin/info/health v1 API (HealthCheckHandler) is governed by
{{{}HEALTH_PERM{}}}, while the new v2 API
[/api/node/health|https://github.com/apache/solr/blob/main/solr/core/src/java/org/apache/solr/handler/admin/api/NodeHealthAPI.java]
uses {{{}CONFIG_READ_PERM{}}}. The V2 API should also use {{{}HEALTH_PERM{}}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
