[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2019-04-24 Thread Hrishikesh Gadre (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825260#comment-16825260 ] Hrishikesh Gadre commented on SOLR-12514: - Ok great. Thanks [~krisden] > Rule-base Authorization

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2019-04-24 Thread Kevin Risden (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825259#comment-16825259 ] Kevin Risden commented on SOLR-12514: - >From the notification email: CVE-2018-11802 > Rule-base

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2019-04-24 Thread Hrishikesh Gadre (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825249#comment-16825249 ] Hrishikesh Gadre commented on SOLR-12514: - Is there a CVE associated with this issue? I don't see

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2019-04-24 Thread Ishan Chattopadhyaya (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825011#comment-16825011 ] Ishan Chattopadhyaya commented on SOLR-12514: - This was also backported to Solr 6.6.6; sorry

Re: [jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-12-04 Thread yydpkm
Hi, I am trying to do similar, make group user A can access collection A and group user b can access collection B. { "name":"readA", "collection":"collectionA","path":["/query","/select","/get"], "role":"collection-A", "index":1}, { "name":"readB",

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-09-08 Thread Noble Paul (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16607933#comment-16607933 ] Noble Paul commented on SOLR-12514: --- {quote}Can we just read the solrconfig.xml for all the collections

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-09-07 Thread JIRA
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16607083#comment-16607083 ] Jan Høydahl commented on SOLR-12514: {quote}Can we just read the solrconfig.xml for all the

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-07-07 Thread Hrishikesh Gadre (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16535892#comment-16535892 ] Hrishikesh Gadre commented on SOLR-12514: - [~janhoy] {quote}Not really, If we only return 302 in

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-07-07 Thread JIRA
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16535876#comment-16535876 ] Jan Høydahl commented on SOLR-12514: bq. With option (b) we will be making a backwards incompatible

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-07-07 Thread Hrishikesh Gadre (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16535851#comment-16535851 ] Hrishikesh Gadre commented on SOLR-12514: - [~mahesh.kumar.vs] {quote}Thanks for sharing the

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-26 Thread JIRA
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16523546#comment-16523546 ] Jan Høydahl commented on SOLR-12514: There are a bunch of complexities arising here, so it's tempting

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-26 Thread Noble Paul (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16523540#comment-16523540 ] Noble Paul commented on SOLR-12514: --- Why not forward all headers other than a few blacklisted ones?

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-26 Thread JIRA
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16523532#comment-16523532 ] Jan Høydahl commented on SOLR-12514: Agree that we need a common generic solution to this, not custom

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-26 Thread Noble Paul (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16523248#comment-16523248 ] Noble Paul commented on SOLR-12514: --- I see this code in the patch {code} + /** + * When Solr

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-25 Thread Mahesh Kumar Vasanthu Somashekar (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16522993#comment-16522993 ] Mahesh Kumar Vasanthu Somashekar commented on SOLR-12514: - Hi [~hgadre] Thanks

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-25 Thread Hrishikesh Gadre (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16522680#comment-16522680 ] Hrishikesh Gadre commented on SOLR-12514: - I think we should consider changing the visibility of

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-25 Thread Hrishikesh Gadre (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16522660#comment-16522660 ] Hrishikesh Gadre commented on SOLR-12514: - Yes I also have observed this behavior with [Solr

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-25 Thread Mahesh Kumar Vasanthu Somashekar (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16522548#comment-16522548 ] Mahesh Kumar Vasanthu Somashekar commented on SOLR-12514: - Hi [~varunthacker]

[jira] [Commented] (SOLR-12514) Rule-base Authorization plugin skips authorization if querying node does not have collection replica

2018-06-25 Thread Varun Thacker (JIRA)
[ https://issues.apache.org/jira/browse/SOLR-12514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16521962#comment-16521962 ] Varun Thacker commented on SOLR-12514: -- Hi Mahesh, Are you trying this on Solr 7.3.1 ? Here are