Hello,
When I had those kind of problems (less complex) with lucene,
the only
idea was to filter from the front-end, according to the ACL policy.
Lucene docs and fields weren't protected, but tagged. Searching was
always applied with a field audience, with hierarchical values like
Hello,
Given the requirement to break down a document into separately
controlled pieces, I'd create a servlet that fronts the Solr
servlet and handles this conversion. I could think of ways to do it
using Solr, but they feel like unnatural acts.
As a general comment on ACLs, one
Hello,
Hi
And about the fields, if they are/aren't going to be present on the
responses based on the user group, you can do it in many
different ways
(using XML transformation to remove the undesirable fields,
implementing
your own RequestHandler able to process your group
Hello,
With all do respect, I really think the problem is largely
underestimated here, and is far more complex then these
suggestions...unless we are talking about 100.000 documents, couple of
users, and updating ones a day. If you want millions of documents,
facetted authorized
Hi all,
Can anyone give me some advice on breaking a document up and indexing it
by access control lists. What we have are xml documents that are
transformed based on the user viewing it. Some users might see all of
the document, while other may see a few fields, and yet others see
nothing at
Hello Nate,
IMHO, you will not be able to do this in solr unless you accept pretty hard
constraints on your ACLs (I will get back to this in a moment). IMO, it is not
possible to index documents along with ACLs. ACLs can be very fine grained, and
the thing you describe, ACL specific parts of a
Excuse me, I meant solr ofcourse :-)
For these reasons, I do not think you can achieve with solar
Hi all,
Can anyone give me some advice on breaking a document up and indexing it
by access control lists. What we have are xml documents that are
transformed based on the user viewing it. Some users might see all of
the document, while other may see a few fields, and yet others see
nothing at
Hi
And about the fields, if they are/aren't going to be present on the
responses based on the user group, you can do it in many different ways
(using XML transformation to remove the undesirable fields, implementing
your own RequestHandler able to process your group information, filtering
the
