Mike Drob created SOLR-15304:
--------------------------------
Summary: collection-admin-edit permissions should imply core-edit
permission
Key: SOLR-15304
URL: https://issues.apache.org/jira/browse/SOLR-15304
Project: Solr
Issue Type: Bug
Security Level: Public (Default Security Level. Issues are Public)
Components: Authorization
Affects Versions: main (9.0)
Reporter: Mike Drob
Tested this on a recent 9x snapshot, probably applies to 8x and older as well.
If you have RuleBasedAuthorizationPlugin configured with:
{noformat}
"permissions":[
{
"name":"collection-admin-edit",
"role":"admin"
},
{
"name": "all",
"role": "none"
}
]
{noformat}
then collection create commands will fail because the user does not have
permission to create cores.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]