2022 May, Solr committer meeting

2022-04-26 Thread Houston Putman
Hello Solr committers, The time has come for the next committers meeting. It will take place on one of *Wednesday, May 10-12th*. Please fill out what days/times work best for you here: https://doodle.com/meeting/organize/id/erkqM2Ka Note: This meeting is restricted to Solr committers, but the n

Re: Can we eliminate solr.disableConfigSetsCreateAuthChecks parameter?

2022-04-26 Thread Shawn Heisey
On 4/26/2022 2:53 PM, Gus Heck wrote: I can't imagine anyone in a serious enterprise turning it on on purpose... But I can imagine FUD arising from its existence. I'm not in favor of any call home type functionality. In order for it to even work, we would need infrastructure in place to recei

Re: Can we eliminate solr.disableConfigSetsCreateAuthChecks parameter?

2022-04-26 Thread Gus Heck
I can't imagine anyone in a serious enterprise turning it on on purpose... But I can imagine FUD arising from its existence. I'm not in favor of any call home type functionality. On Tue, Apr 26, 2022 at 3:03 PM Shawn Heisey wrote: > On 4/26/22 12:06, Ishan Chattopadhyaya wrote: > > > I wonder if

Re: Can we eliminate solr.disableConfigSetsCreateAuthChecks parameter?

2022-04-26 Thread Shawn Heisey
On 4/26/22 12:06, Ishan Chattopadhyaya wrote: > I wonder if we should build in some kind of "call home" functionality On principle, I would object to anything like this. It breaks the trust. Makes users suspicious. Puts more onus on practitioners to vet the releases for something sneaky. I much

Re: Can we eliminate solr.disableConfigSetsCreateAuthChecks parameter?

2022-04-26 Thread Ishan Chattopadhyaya
> I wonder if we should build in some kind of "call home" functionality On principle, I would object to anything like this. It breaks the trust. Makes users suspicious. Puts more onus on practitioners to vet the releases for something sneaky. I much prefer Marcus Eagan's proposal for a PMC driven s

Why is SolrRequest.getParams() abstract?

2022-04-26 Thread Gus Heck
I was shocked to discover https://issues.apache.org/jira/browse/SOLR-14967 causes solr to violate one of it's most key precepts that zk is not involved on every query. In looking into this, I ran across this code: https://github.com/apache/solr/blob/b218c177b8e3b387ada03acbad214a0c3bfe1443/solr/so

Re: Can we eliminate solr.disableConfigSetsCreateAuthChecks parameter?

2022-04-26 Thread Jan Høydahl
Yea, should be opt-in. What about a button in Admin UI that would call /admin/info/system with some new param "?stats=true" and submit the resulting JSON with some feature usage stats somewhere? However, the presence of some handler or feature in config is not synonymous with it being used, and

Re: Can we eliminate solr.disableConfigSetsCreateAuthChecks parameter?

2022-04-26 Thread Shawn Heisey
On 4/26/22 07:42, David Smiley wrote: I'm glad you raise the question here but definitely raise this on the SOLR-14663 as well so that you get attention from pertinent folks there.  I wouldn't be surprised if some of our users have JIRA accounts but don't subscribe to this list. This idea is

Re: Can we eliminate solr.disableConfigSetsCreateAuthChecks parameter?

2022-04-26 Thread David Smiley
I'm glad you raise the question here but definitely raise this on the SOLR-14663 as well so that you get attention from pertinent folks there. I wouldn't be surprised if some of our users have JIRA accounts but don't subscribe to this list. ~ David Smiley Apache Lucene/Solr Search Developer http:

Re: Can we eliminate solr.disableConfigSetsCreateAuthChecks parameter?

2022-04-26 Thread Andras Salamon
Hi, We are using this property so I think it would be good to keep this. Best, Andras On Mon, Apr 25, 2022 at 4:46 PM Eric Pugh wrote: > While looking at https://issues.apache.org/jira/browse/SOLR-16110 "Using > Schema/Config API breaks the File-Upload of Config Set File”, I learned > about th

Re: [RESULT][VOTE] Release Solr 9.0.0 RC3

2022-04-26 Thread Jan Høydahl
Thanks Houston for lmost completing the release :) Houston asked me to take the RM hat back for RC4. Unless you guys are aware of other blockers, I'll try to spin RC4 soon. Jan > 16. apr. 2022 kl. 00:24 skrev Houston Putman : > > Ok, this is officially done. We can move onto RC4 as if RC3 ne