Andras Salamon created SOLR-14663: ------------------------------------- Summary: ConfigSets CREATE does not set trusted flag Key: SOLR-14663 URL: https://issues.apache.org/jira/browse/SOLR-14663 Project: Solr Issue Type: Task Security Level: Public (Default Security Level. Issues are Public) Reporter: Andras Salamon
If I upload a configset using [ConfigSets API|https://lucene.apache.org/solr/guide/8_6/configsets-api.html] UPLOAD Solr sets the trusted flag. The config set will be trusted if authentication is enabled and the upload operation is performed as an authenticated request. On the other hand if I use the ConfigSets API CREATE which creates a new configset based on an already uploaded one, this flag will not be set, so the configset will be effectively untrusted. I don't really understand the difference here, I think CREATE API call should set this flag just like UPLOAD sets it. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org