Marco Remy created SOLR-18614:
---------------------------------
Summary: Predefined "health" permission don't grants anonymous
access to v2 health endpoint
Key: SOLR-18614
URL: https://issues.apache.org/jira/browse/SOLR-18614
Project: Solr
Issue Type: Bug
Components: Authorization
Affects Versions: 10.1
Reporter: Marco Remy
After upgrading from Solr 10.0.0 to 10.1.0, anonymous access to the v2 health
endpoint stopped working even though the predefined {{health}} permission and
{{{}authentication.blockUnknown = false{}}}.
*Steps to reproduce:*
* Configure BasicAuth + RuleBasedAuthorizationPlugin with:
* {{authentication.blockUnknown = false}}
* Predefined permission {{\{"name": "health", "role": null, "index": 11\}}}
Call the endpoints without credentials:
{noformat}
GET /solr/admin/info/health → 200 (works)
GET /api/node/health → 401
{noformat}
*Workaround that restores access:*
{code:json}
{
"name": "health-v2",
"role": null,
"collection": null,
"path": ["/____v2/node/health"],
"method": ["GET"],
"params":{},
"index": 12
}
{code}
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
