dsmiley commented on PR #1615:
URL: https://github.com/apache/solr/pull/1615#issuecomment-1531543727

   BTW I want to call attention to 
https://github.com/apache/solr/blob/6d5529a39fd995c207425da7f39e32721955b616/solr/core/src/java/org/apache/solr/handler/DumpRequestHandler.java#L129
 
   which feels weird to me.  I don't think I love varying the permission of a 
handler based on wether remote streaming is enabled or not.  Nor do I know why 
CONFIG_READ_PERM in particular was chosen.  I suppose this is here because it's 
super easy to have Solr fetch whatever URL for you on your behalf... but if you 
enabled remote streaming then, shrug, it all seems moot honestly.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to