[ https://issues.apache.org/jira/browse/SOLR-12120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16810677#comment-16810677 ]
ASF subversion and git services commented on SOLR-12120: -------------------------------------------------------- Commit 4d95746b01cbed6868a65bd4cd713126cb43275e in lucene-solr's branch refs/heads/branch_8x from Jan Høydahl [ https://gitbox.apache.org/repos/asf?p=lucene-solr.git;h=4d95746 ] SOLR-12120: Harden AuditLoggerIntegrationTest, timing issues (cherry picked from commit aadc94a6e3887955ed08439d32e29fe31b622a45) > New plugin type AuditLoggerPlugin > --------------------------------- > > Key: SOLR-12120 > URL: https://issues.apache.org/jira/browse/SOLR-12120 > Project: Solr > Issue Type: New Feature > Security Level: Public(Default Security Level. Issues are Public) > Components: security > Reporter: Jan Høydahl > Assignee: Jan Høydahl > Priority: Major > Fix For: 8.1 > > Time Spent: 3h 10m > Remaining Estimate: 0h > > Solr needs a well defined plugin point to implement audit logging > functionality, which is independent from whatever {{AuthenticationPlugin}} or > {{AuthorizationPlugin}} are in use at the time. > It seems reasonable to introduce a new plugin type {{AuditLoggerPlugin}}. It > could be configured in solr.xml or it could be a third type of plugin defined > in {{security.json}}, i.e. > {code:java} > { > "authentication" : { "class" : ... }, > "authorization" : { "class" : ... }, > "auditlogging" : { "class" : "x.y.MyAuditLogger", ... } > } > {code} > We could then instrument SolrDispatchFilter to the audit plugin with an > AuditEvent at important points such as successful authentication: > {code:java} > auditLoggerPlugin.audit(new SolrAuditEvent(EventType.AUTHENTICATED, > request)); > {code} > We will mark the impl as {{@lucene.experimental}} in the first release to > let it settle as people write their own plugin implementations. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org