[
https://issues.apache.org/jira/browse/SOLR-7125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14326552#comment-14326552
]
Hoss Man edited comment on SOLR-7125 at 2/18/15 9:02 PM:
---------------------------------------------------------
Alan: i don't know all the details, but SOLR-6915 is pretty much on point here
in terms of letting solr read/write what it needs to in ZK, while some subset
of users can modify configs, while other clients/users may only have read
access to ZK.
just because someone can create CloudSolrClient instance and get the list of
active nodes from ZK doesn't mean they can/should be allowed full write access
to ZK.
----
EDIT: to clarify my point: i'm not saying we shouldn't support this in
CloudSolrClient, i'm saying *if* we support it, we need to keep the security
conious use case in mind and ensure we have a good story/docs for folks who
care about things like SOLR-6915 ... maybe it "just works" because the ZK
credentials used when constructing the CloudSolrClient instance are prevented
from writing to those config nodes in these secure cases, and they returne a
good error message ... but we should think about that and test it.
was (Author: hossman):
Alan: i don't know all the details, but SOLR-6915 is pretty much on point here
in terms of letting solr read/write what it needs to in ZK, while some subset
of users can modify configs, while other clients/users may only have read
access to ZK.
just because someone can create CloudSolrClient instance and get the list of
active nodes from ZK doesn't mean they can/should be allowed full write access
to ZK.
> Allow clients to upload/download configs via CloudSolrClient
> ------------------------------------------------------------
>
> Key: SOLR-7125
> URL: https://issues.apache.org/jira/browse/SOLR-7125
> Project: Solr
> Issue Type: Improvement
> Reporter: Alan Woodward
> Assignee: Alan Woodward
> Priority: Minor
> Fix For: 5.1
>
> Attachments: SOLR-7125.patch
>
>
> Adding new configs to ZK is still something of a pain point. We should add
> some helper methods to CloudSolrClient that make this easier.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
