Re: Safeguards for stray commands from deleting solr data

2014-05-30 Thread Erick Erickson 
Not unless you disable the update handler completely. Assuming you have
sensitive data, you really need to secure your Solr server behind an app
though.

Best,
Erick


On Thu, May 29, 2014 at 9:12 AM, Joshi, Shital shital.jo...@gs.com wrote:

 Hi,

 What are ways to prevent someone executing random delete commands against
 Solr? Like:

 curl http://solr.com:8983/solr/core/update?commit=true -H Content-Type:
 text/xml --data-binary 'deletequery*:*/query/delete'

 I understand we can do IP based access (change /etc/jetty.xml). Is there
 anything Solr provides out of the box?

 Thanks!

Safeguards for stray commands from deleting solr data

2014-05-29 Thread Joshi, Shital 
Hi,

What are ways to prevent someone executing random delete commands against Solr? 
Like:

curl http://solr.com:8983/solr/core/update?commit=true -H Content-Type: 
text/xml --data-binary 'deletequery*:*/query/delete'

I understand we can do IP based access (change /etc/jetty.xml). Is there 
anything Solr provides out of the box?

Thanks!