Just to make sure. In my previous question I was referring to the user/pass that queries the db.
Now I was referring to the user/pass that i want for the solr http request. Think of it as if my user sends a request where he filter documents created by another user. I want to restrict that. I currently work in a .NET environment where we have identity provider that provides trusted claims to the http request. In similar situations I take the user name property from a trusted claim and not from a parameter in the url . I want to know how solr can restrict his http request/responses. Thank you. On Tue, Jun 18, 2013 at 10:56 AM, Gora Mohanty <g...@mimirtech.com> wrote: > On 18 June 2013 13:10, Mysurf Mail <stammail...@gmail.com> wrote: > > Hi, > > In order to add solr to my prod environmnet I have to implement some > > security restriction. > > Is there a way to add user/pass to the requests and to keep them > > *encrypted*in a file. > > As mentioned earlier, no there is no built-in way of doing that > if you are using the Solr DataImportHandler. > > Probably the easiest way would be to implement your own > indexing using a library like SolrJ. Then, you can handle encryption > as you wish. > > Regards, > Gora >