Lance,
Makes sense. We are playing around with keeping the security model
completely out of Index. We will filter out results before data display
based on access rights. But approach you suggested is not ruled out
completely.
thanks
Lance Norskog-2 wrote:
>
> Yes, you would have 'role' as a mult
Yes, you would have 'role' as a multi-valued field. When you add
someone to a role, you don't have to re-index. That's all.
On Thu, Dec 17, 2009 at 12:55 PM, caman wrote:
>
> Are you suggesting that roles should be maintained in the index? We do manage
> out authentication based on roles but at g
Are you suggesting that roles should be maintained in the index? We do manage
out authentication based on roles but at granular level, user rights play a
big role as well.
I know we need to compromise, just need to find a balance.
Thanks
Lance Norskog-2 wrote:
>
> Role-based authentication is
Role-based authentication is one level of sophistication up from
user-based authentication. Users can have different roles, and
authentication goes against roles. Documents with multiple viewers
would be assigned special roles. All users would also have their own
matching role.
On Tue, Dec 15, 200
Erick,
I know what you mean.
Wonder if it is actually cleaner to keep the authorization model out of
solr index and filter the data at client side based on the user access
rights.
Thanks all for help.
Erick Erickson wrote:
>
> Yes, that should work. One hard part is what happens if your
> a
Yes, that should work. One hard part is what happens if your
authorization model has groups, especially when membership
in those groups changes. Then you have to go in and update
all the affected docs.
FWIW
Erick
On Tue, Dec 15, 2009 at 12:24 PM, caman wrote:
>
> Shalin,
>
> Thanks. much app
Shalin,
Thanks. much appreciated.
Question about:
"That is usually what people do. The hard part is when some documents are
shared across multiple users. "
What do you recommend when documents has to be shared across multiple users?
Can't I just multivalue a field with all the users who has ac
On Tue, Dec 15, 2009 at 7:26 AM, caman wrote:
>
> Appreciate any guidance here please. Have a master-child table between two
> tables 'TA' and 'TB' where form is the master table. Any row in TA can have
> multiple row in TB.
> e.g. row in TA
>
> id---name
> 1---tweets
>
> TB:
> id|ta_id|field0|fie
