Hi Lalit,

Are you sure you are using the standard select query handler?  In order to
convince me, you will need to enable appropriate Solr logging so I can see
how a request is processed and whether the MCF solr plugin is being called.

Karl



On Mon, Aug 11, 2014 at 11:59 AM, lalit jangra <[email protected]>
wrote:

> Thanks Karl,
>
> Below are my comments.
>
> 1. Your Solr query is in fact not hooked up to use the appropriate MCF
> Solr plugin, in which case no security whatsoever is being applied.
> --- Below is snippet from solrconfig.xml from one of servers with MCF Solr
> plugin included and enabled with /select query handler which i am using for
> search. I assume i need not to provide full server name for 
> AuthorityServiceBaseURL
> & instead localhost will work fine.
>
>
> <!-- ManifoldCF document security enforcement component -->
>
>   <queryParser name="manifoldCFSecurity"
>
>     class="org.apache.solr.mcf.ManifoldCFQParserPlugin">
>
>     <str name="AuthorityServiceBaseURL">
> http://localhost:80/mcf-authority-service</str>
>
>     <int name="ConnectionPoolSize">50</int>
>
>   </queryParser>
>
>
>
>    <!-- ManifoldCF document security enforcement component -->
>
>   <searchComponent name="manifoldCFSecurity"
>
>     class="org.apache.solr.mcf.ManifoldCFSearchComponent">
>
>     <str name="AuthorityServiceBaseURL">
> http://localhost:80/mcf-authority-service</str>
>
>     <int name="ConnectionPoolSize">50</int>
>
>   </searchComponent>
>
>
>
>
>
>   <requestHandler name="/select" class="solr.SearchHandler">
>
>      <lst name="defaults">
>
>        <str name="echoParams">explicit</str>
>
>        <int name="rows">10000</int>
>
>        <str name="df">text</str>
>
>      </lst>
>
>          <lst name="appends">
>
>                 <str name="fq">{!manifoldCFSecurity}</str>
>
>          </lst>
>
>   </requestHandler>
>
>
>
> Below is one of queries built for same using AuthenticatedUserName
>
>
>
> q=%22blue%22&q.op=OR&df=text&qt=%2Fselect&sort=score+desc&fq=content_source%3ASharePoint&AuthenticatedUserName=ljangra%
> 40iwater.ie
>
>
> 2. You are supposed to be able to see the documents, but the URL
> ManifoldCF is generating does not permit you to log into SharePoint for
> some reason.
> -- If i go to the location of the search result, i am not able to see any
> document available there for me as per my permissions.
>
> 3. You indexed the documents with security "off", and so no security
> information was attached to the documents in Solr.
> --- I have enabled security before starting the job as below.
>
>
> Please suggest.
>
> Regards.
>
>
> On Mon, Aug 11, 2014 at 5:17 PM, Karl Wright <[email protected]> wrote:
>
>> Hi Lalit,
>>
>> There are a number of possibilities.  You will need to do some
>> investigation to figure out which one it is.  Here are the possibilities I
>> see:
>>
>> (1) Your Solr query is in fact not hooked up to use the appropriate MCF
>> Solr plugin, in which case no security whatsoever is being applied.
>> (2) You are supposed to be able to see the documents, but the URL
>> ManifoldCF is generating does not permit you to log into SharePoint for
>> some reason.
>> (3) You indexed the documents with security "off", and so no security
>> information was attached to the documents in Solr.
>>
>> Thanks,
>> Karl
>>
>>
>>
>> On Mon, Aug 11, 2014 at 7:30 AM, lalit jangra <[email protected]>
>> wrote:
>>
>>> Hi,
>>>
>>> I am using MCF 1.5.1 and crawling SharePoint 2010 list items. I have
>>> also placed MCF solr ACL plugin into solr instances and updated
>>> solrconfig.xml for same. I created a job to connect to SharePoint and
>>> indexed list items in solr.
>>>
>>> Next i am searching for content items from index and what i could see is
>>> that i am able to see search results for content on which i do not have any
>>> access. I can see these content into search results but when i am trying to
>>> aceess these content , i can getting SharePoint access denied error.
>>> Ideally if a user has no access to a content, he should not be see these
>>> content.
>>>
>>> Am i missing anything here?
>>>
>>> Regards,
>>> Lalit.
>>>
>>
>>
>
>
> --
> Regards,
> Lalit.
>

Reply via email to