[
https://issues.apache.org/jira/browse/SOLR-18614?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Marco Remy updated SOLR-18614:
------------------------------
Summary: Predefined "health" permission does not grant anonymous access to
v2 health endpoint (was: Predefined "health" permission don't grants anonymous
access to v2 health endpoint)
> Predefined "health" permission does not grant anonymous access to v2 health
> endpoint
> ------------------------------------------------------------------------------------
>
> Key: SOLR-18614
> URL: https://issues.apache.org/jira/browse/SOLR-18614
> Project: Solr
> Issue Type: Bug
> Components: Authorization
> Affects Versions: 10.1
> Reporter: Marco Remy
> Priority: Minor
> Labels: authorization, health, health-check, monitoring
>
> After upgrading from Solr 10.0.0 to 10.1.0, anonymous access to the v2 health
> endpoint stopped working even though the predefined {{health}} permission and
> {{{}authentication.blockUnknown = false{}}}.
> *Steps to reproduce:*
> * Configure BasicAuth + RuleBasedAuthorizationPlugin with:
> * {{authentication.blockUnknown = false}}
> * Predefined permission {{\{"name": "health", "role": null, "index": 11\}}}
> Call the endpoints without credentials:
> {noformat}
> GET /solr/admin/info/health → 200 (works)
> GET /api/node/health → 401
> {noformat}
> *Workaround that restores access:*
> {code:json}
> {
> "name": "health-v2",
> "role": null,
> "collection": null,
> "path": ["/____v2/node/health"],
> "method": ["GET"],
> "params":{},
> "index": 12
> }
> {code}
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
