RE: disallowing delete through security.json

2021-01-12 Thread Oakley, Craig (NIH/NLM/NCBI) [C]
ng a large collection (as required in order to complete the upgrade to a new release), let me know. -Original Message- From: Oakley, Craig (NIH/NLM/NCBI) [C] Sent: Tuesday, November 24, 2020 1:56 PM To: solr-user@lucene.apache.org Subject: RE: disallowing delete through security.json Tha

RE: disallowing delete through security.json

2020-11-24 Thread Oakley, Craig (NIH/NLM/NCBI) [C]
isallowing delete through security.json Hey Craig, I think this will be tricky to do with the current Rule-Based Authorization support. As you pointed out in your initial post - there are lots of ways to delete documents. The Rule-Based Auth code doesn't inspect request bodies (AFAIK), so it&

Re: disallowing delete through security.json

2020-11-24 Thread Jason Gerlowski
Hey Craig, I think this will be tricky to do with the current Rule-Based Authorization support. As you pointed out in your initial post - there are lots of ways to delete documents. The Rule-Based Auth code doesn't inspect request bodies (AFAIK), so it's going to have trouble differentiating bet

RE: disallowing delete through security.json

2020-11-19 Thread Oakley, Craig (NIH/NLM/NCBI) [C]
Having not heard back, I thought I would ask again whether anyone else has been able to use security.json to disallow deletes, and/or if anyone has examples of using the "method" section in lucene.apache.org/solr/guide/8_4/rule-based-authorization-plugin.html -Original Message- From: Oa