[
https://issues.apache.org/jira/browse/SOLR-16944?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jan Høydahl resolved SOLR-16944.
--------------------------------
Fix Version/s: 9.4
Resolution: Fixed
> /api/node/health should be governed by "health" permission
> ----------------------------------------------------------
>
> Key: SOLR-16944
> URL: https://issues.apache.org/jira/browse/SOLR-16944
> Project: Solr
> Issue Type: Bug
> Security Level: Public(Default Security Level. Issues are Public)
> Components: security
> Reporter: Jan Høydahl
> Assignee: Jan Høydahl
> Priority: Major
> Fix For: 9.4
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The /solr/admin/info/health v1 API (HealthCheckHandler) is governed by
> {{{}HEALTH_PERM{}}}, while the new v2 API
> [/api/node/health|https://github.com/apache/solr/blob/main/solr/core/src/java/org/apache/solr/handler/admin/api/NodeHealthAPI.java]
> uses {{{}CONFIG_READ_PERM{}}}. The V2 API should also use
> {{{}HEALTH_PERM{}}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
