[ https://issues.apache.org/jira/browse/SOLR-14663?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17160300#comment-17160300 ]
Lucene/Solr QA commented on SOLR-14663: --------------------------------------- | (x) *{color:red}-1 overall{color}* | \\ \\ || Vote || Subsystem || Runtime || Comment || || || || || {color:brown} Prechecks {color} || | {color:green}+1{color} | {color:green} test4tests {color} | {color:green} 0m 0s{color} | {color:green} The patch appears to include 1 new or modified test files. {color} | || || || || {color:brown} master Compile Tests {color} || | {color:green}+1{color} | {color:green} compile {color} | {color:green} 1m 2s{color} | {color:green} master passed {color} | || || || || {color:brown} Patch Compile Tests {color} || | {color:red}-1{color} | {color:red} compile {color} | {color:red} 0m 46s{color} | {color:red} core in the patch failed. {color} | | {color:red}-1{color} | {color:red} javac {color} | {color:red} 0m 46s{color} | {color:red} core in the patch failed. {color} | | {color:red}-1{color} | {color:red} Release audit (RAT) {color} | {color:red} 0m 46s{color} | {color:red} core in the patch failed. {color} | | {color:red}-1{color} | {color:red} Check forbidden APIs {color} | {color:red} 0m 46s{color} | {color:red} core in the patch failed. {color} | | {color:red}-1{color} | {color:red} Validate source patterns {color} | {color:red} 0m 46s{color} | {color:red} core in the patch failed. {color} | || || || || {color:brown} Other Tests {color} || | {color:red}-1{color} | {color:red} unit {color} | {color:red} 0m 23s{color} | {color:red} core in the patch failed. {color} | | {color:black}{color} | {color:black} {color} | {color:black} 2m 20s{color} | {color:black} {color} | \\ \\ || Subsystem || Report/Notes || | JIRA Issue | SOLR-14663 | | JIRA Patch URL | https://issues.apache.org/jira/secure/attachment/13007874/SOLR-14663.patch | | Optional Tests | compile javac unit ratsources checkforbiddenapis validatesourcepatterns | | uname | Linux lucene1-us-west 4.15.0-108-generic #109-Ubuntu SMP Fri Jun 19 11:33:10 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux | | Build tool | ant | | Personality | /home/jenkins/jenkins-slave/workspace/PreCommit-SOLR-Build/sourcedir/dev-tools/test-patch/lucene-solr-yetus-personality.sh | | git revision | master / 1a7db1c9f53 | | ant | version: Apache Ant(TM) version 1.10.5 compiled on March 28 2019 | | Default Java | LTS | | compile | https://builds.apache.org/job/PreCommit-SOLR-Build/783/artifact/out/patch-compile-solr_core.txt | | javac | https://builds.apache.org/job/PreCommit-SOLR-Build/783/artifact/out/patch-compile-solr_core.txt | | Release audit (RAT) | https://builds.apache.org/job/PreCommit-SOLR-Build/783/artifact/out/patch-compile-solr_core.txt | | Check forbidden APIs | https://builds.apache.org/job/PreCommit-SOLR-Build/783/artifact/out/patch-compile-solr_core.txt | | Validate source patterns | https://builds.apache.org/job/PreCommit-SOLR-Build/783/artifact/out/patch-compile-solr_core.txt | | unit | https://builds.apache.org/job/PreCommit-SOLR-Build/783/artifact/out/patch-unit-solr_core.txt | | Test Results | https://builds.apache.org/job/PreCommit-SOLR-Build/783/testReport/ | | modules | C: solr/core U: solr/core | | Console output | https://builds.apache.org/job/PreCommit-SOLR-Build/783/console | | Powered by | Apache Yetus 0.7.0 http://yetus.apache.org | This message was automatically generated. > ConfigSets CREATE does not set trusted flag > ------------------------------------------- > > Key: SOLR-14663 > URL: https://issues.apache.org/jira/browse/SOLR-14663 > Project: Solr > Issue Type: Task > Security Level: Public(Default Security Level. Issues are Public) > Reporter: Andras Salamon > Priority: Major > Attachments: SOLR-14663.patch > > > If I upload a configset using [ConfigSets > API|https://lucene.apache.org/solr/guide/8_6/configsets-api.html] UPLOAD Solr > sets the trusted flag. The config set will be trusted if authentication is > enabled and the upload operation is performed as an authenticated request. > On the other hand if I use the ConfigSets API CREATE which creates a new > configset based on an already uploaded one, this flag will not be set, so the > configset will be effectively untrusted. > I don't really understand the difference here, I think CREATE API call should > set this flag just like UPLOAD sets it. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org