Andras Salamon created SOLR-14663:
-------------------------------------

             Summary: ConfigSets CREATE does not set trusted flag
                 Key: SOLR-14663
                 URL: https://issues.apache.org/jira/browse/SOLR-14663
             Project: Solr
          Issue Type: Task
      Security Level: Public (Default Security Level. Issues are Public)
            Reporter: Andras Salamon


If I upload a configset using [ConfigSets 
API|https://lucene.apache.org/solr/guide/8_6/configsets-api.html] UPLOAD Solr 
sets the trusted flag. The config set will be trusted if authentication is 
enabled and the upload operation is performed as an authenticated request.

On the other hand if I use the ConfigSets API CREATE which creates a new 
configset based on an already uploaded one, this flag will not be set, so the 
configset will be effectively untrusted.

I don't really understand the difference here, I think CREATE API call should 
set this flag just like UPLOAD sets it.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org

Reply via email to