janhoy opened a new issue, #169: URL: https://github.com/apache/solr-mcp/issues/169
In the threat-model work (#160) we discussed whether to explicitly document, at least in v1.0.0 that the mcp does **not** support multi tenancy. I.e. set the expectation that the only intended deployment option is that each user deploys their own mcp server with their own solr credentials, meaning the user understands that all and any action that is allowed by that user in solr-backend (admin permissions etc) will also be available to the mcp. By formally documenting this (as already drafted as undecided in the threat model in https://github.com/apache/solr-mcp/pull/160/commits/7ec9c3494b9be2b167f521f7d6b4a4f90df8943c), we will avoid a ton of claimed vulnerability reports claiming that the mcp server allows too much or is insecure in multi tenancy setups. In a later version, we can consider supporting multi tenancy. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
