Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-17 Thread Peter Sturge
You'll need to be a bit careful using joins, as the performance hit can be significant if you have lots of cross-referencing to do, which I believe you would given your scenario. Your table could be setup to use the username as the key (for fast lookup), then map these to your own data class or

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-17 Thread Constantijn Visinescu
Just to chip in my 2 cents: You know you can increase the max number of boolean clauses in the configuration files? Depending on your situation it might not be a permanent fix, but it could provide some instant relief. Constantijn On Fri, Jun 17, 2011 at 11:19 AM, Peter Sturge

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-17 Thread Alexey Serba
Do you mean that we  have current Index as it is and have a separate core which  has only the user-id ,product-id relation and at while querying ,do a join between the two cores based on the user-id. Exactly. You can index user-id, product-id relation either to the same core or to different

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-17 Thread Sujatha Arun
Thanks ,Peter . This very much seems to be the solution that I should be going forward with .Thanks for your time and clear explanation. Regards Sujatha On Fri, Jun 17, 2011 at 2:49 PM, Peter Sturge peter.stu...@gmail.comwrote: You'll need to be a bit careful using joins, as the

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-17 Thread Sujatha Arun
Constantijn, I am aware of this and we have already increased max boolean clauses to 3500 from the default 1200 for all our 200+ instances . But the requirement is that we could have n number of products running to several thousands for each of the instances and since n is not defined ,

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-17 Thread Sujatha Arun
Alexey , We are not planning to upgrade our solr version at the moment as all is fine with the current version so far and hence would not be able to try this solution . Regards Sujatha On Fri, Jun 17, 2011 at 3:47 PM, Alexey Serba ase...@gmail.com wrote: Do you mean that we have current

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-16 Thread Alexey Serba
So a search for a product once the user logs in and searches for only the products that he has access to Will translate to something like this . ,the product ids are obtained form the db  for a particular user and can run into  n  number. search term fq=product_id(100 10001  ..n number)

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-16 Thread Sujatha Arun
Peter , Thanks for the clarification. Why I specifically asked was because, we have many search instances (200+) on a single JVM. Each of these instaces could have n users and each user can subscribe to n products .Now accordng to your suggestion , I need to maintain an in-memory list of

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-16 Thread Sujatha Arun
Alexey, Do you mean that we have current Index as it is and have a separate core which has only the user-id ,product-id relation and at while querying ,do a join between the two cores based on the user-id. This would involve us to Index/delete the product as and when the user subscription

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-15 Thread Sujatha Arun
Thanks ,Peter. I am not a Java Programmer and hence the code seems all Greek and Latin to me .I do have a basic knowledge ,but all this Map,hashMap ,Hashlist,NamedList , I dont understand. However I would like to implement the solution that you have mentoned ,so if you have any pointers for

Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-14 Thread Sujatha Arun
Hello, Our Use Case is as follows Several solr webapps (one JVM) ,Each webapp catering to one client .Each client has their users who can purchase products from the site .Once they purchase ,they have full access to the products ,other wise they can only view details . The products are not

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-14 Thread Peter Sturge
Hi, SOLR-1834 is good when the original documents' ACL is accessible. SOLR-1872 is good where the usernames are persistent - neither of these really fit your use case. It sounds like you need more of an 'in-memory', transient access control mechanism. Does the access have to exist beyond the

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-14 Thread Sujatha Arun
Thanks Peter , for your input . I really would like a document and schema agnostic solution as in solr 1872. Am I right in my assumption that SOLR1872 is same as the solution that we currently have where we add a flter query of the products to orignal query and hence (SOLR 1872) will

Re: Document Level Security (SOLR-1872 ,SOLR,SOLR-1834)

2011-06-14 Thread Peter Sturge
SOLR-1872 doesn't add discrete booleans to the query, it does it programmatically, so you shouldn't see this problem. (if you have a look at the code, you'll see how it filters queries) I suppose you could modify SOLR-1872 to use an in-memory, dynamically-updated user list (+ associated filters)