janhoy commented on PR #5048: URL: https://github.com/apache/solr/pull/5048#issuecomment-6063337079
How do we even authorize streaming expr? Since we have just one endpoint and same HTTP verb, and some expressions are destructive? Perhaps we can distinguish permissions `streaming-read` and `streaming-write`, and give the read one ony access to `HTTP QUERY` verb, while the write one also gets `HTTP POST`? Then the streaming expr parser can decide whether the passed expression is read or write, and authorize based on it? Or am I complicating things? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
