[
https://issues.apache.org/jira/browse/SOLR-16944?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17757598#comment-17757598
]
ASF subversion and git services commented on SOLR-16944:
--------------------------------------------------------
Commit 59f70172167795e7e2bdb2da66b1f45c6fc8250c in solr's branch
refs/heads/main from Jan Høydahl
[ https://gitbox.apache.org/repos/asf?p=solr.git;h=59f70172167 ]
SOLR-16944 V2 API /api/node/health should be governed by "health" permission,
not "config-read" (#1858)
> /api/node/health should be governed by "health" permission
> ----------------------------------------------------------
>
> Key: SOLR-16944
> URL: https://issues.apache.org/jira/browse/SOLR-16944
> Project: Solr
> Issue Type: Bug
> Security Level: Public(Default Security Level. Issues are Public)
> Components: security
> Reporter: Jan Høydahl
> Assignee: Jan Høydahl
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The /solr/admin/info/health v1 API (HealthCheckHandler) is governed by
> {{{}HEALTH_PERM{}}}, while the new v2 API
> [/api/node/health|https://github.com/apache/solr/blob/main/solr/core/src/java/org/apache/solr/handler/admin/api/NodeHealthAPI.java]
> uses {{{}CONFIG_READ_PERM{}}}. The V2 API should also use
> {{{}HEALTH_PERM{}}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
