[ https://issues.apache.org/jira/browse/SOLR-12948?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jan Høydahl resolved SOLR-12948. -------------------------------- Resolution: Invalid Closing as invalid. This is not a support portal for asking questions. Please ask your question in the solr-user mailing list [http://lucene.apache.org/solr/community.html#mailing-lists-irc] There is no fine-grained authorization support in the Admin UI that would hide menus based on who logs in or similar, so what you describe is by design. Using HTTP directly towards the /select endpoint you should be able to do without authentication if you configured security.json correctly. Please do not reply in this Jira, but follow up on the solr-user mailing list. > Basic Auth login windows pops up with page loaded > ------------------------------------------------- > > Key: SOLR-12948 > URL: https://issues.apache.org/jira/browse/SOLR-12948 > Project: Solr > Issue Type: Bug > Security Level: Public(Default Security Level. Issues are Public) > Components: Admin UI > Affects Versions: 7.5 > Reporter: Wei Liao > Priority: Major > Attachments: Screenshot from 2018-10-31 14-30-09.png > > > I've enabled basic auth in my solr 7.5 installation (with no blockUnknown), > created an admin role and added all of the [predefined > permission|https://lucene.apache.org/solr/guide/7_5/rule-based-authorization-plugin.html] > (except read and all) to the role, and created an admin user with that role. > What I wanted to do, is to enable public access only to the /select for > querying, and password protect everything else. > With this, I can hit /select without authentication, but when I browse to the > admin UI, the login window pops up as I'd expect, but the dashboard page also > loaded up, see attached. I'd have expected nothing's showing except the login. > If this is the wrong approach to what I needed, I'm interested in what you > guys do to achieve this. > Thanks! > -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org