Re: Solr RuleBasedAuthorizationPlugin question

2019-05-08 Thread Jérémy
Hi Jason, Thanks for the your help again. Your suggestion for the core creation works well. I tried both workarounds for the admin UI but without any success. No worries I'll watch the issue and wait for its resolution. Thank you! Jeremy On Tue, May 7, 2019 at 6:08 PM Jason Gerlowski wrote: >

Re: Solr RuleBasedAuthorizationPlugin question

2019-05-07 Thread Jason Gerlowski
The Admin UI lockdown is a known-issue in RBAP that's since been fixed. (https://issues.apache.org/jira/browse/SOLR-13344), but only in very recent versions of Solr. I haven't tried this, but you should be able to work around it by putting a rule like: {path: /, role: *} right before your catch-al

Re: Solr RuleBasedAuthorizationPlugin question

2019-05-07 Thread Jérémy
Hi Jason, Thanks a lot for the detailed explanation. It's still very unclear in my head how things work, but now I know about the weird fallback mechanism of RBAP. Despite your example I still didn't manage to get the behavior I wanted. Here's the closest I've been so far. Any logged in user can s

Re: Solr RuleBasedAuthorizationPlugin question

2019-05-06 Thread Jason Gerlowski
Hey Jeremy, One important thing to remember about the RuleBasedAuthorizationPlugin is that if it doesn't find any rules matching a particular API call, it will allow the request. I think that's what you're running into here. Let's trace through how RBAP will process your rules: 1. Solr receives

Solr RuleBasedAuthorizationPlugin question

2019-05-03 Thread Jérémy
Hi, I hope that this question wasn't answered already, but I couldn't find what I was looking for in the archives. I'm having a hard time to use solr with the BasicAuth and RoleBasedAuthorization plugins. The auth part works well but I have issues with the RoleBasedAuthorization part. I'd like to