epugh commented on PR #5214:
URL: https://github.com/apache/solr/pull/5214#issuecomment-6442276396
I did a bit of poking, and apparently while this fixes collection level jax
rs v2 apis, it doesn't do core level???
> Minor observation, not a blocker: this only fixes container-level
double-authorization; core-level JAX-RS endpoints (e.g.
/api/cores/{core}/replication) can still hit the same false-403 for users with
a specific-but-not-all permission. That's explicitly out of scope here and the
changelog wording correctly says "Container-level" rather than overclaiming —
just worth knowing if you see the same symptom on a core-level endpoint later,
it's a separate, not-yet-fixed case.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
