On Mon, Nov 17, 2008 at 8:54 AM, Erik Hatcher <[EMAIL PROTECTED]> wrote: > Sounds like the perfect case for a query parser plugin... or use dismax as > Ryan mentioned. Shouldn't Solr be hardened for these cases anyway? Or at > least hardenable.
Say you do filtering by user - how would you enforce that the client (if it's a browser) only send in the proper filter? Doesn't seem like you can unless you put all the user authentication stuff and application logic right in Solr. Now I guess you *could* stick everything in Solr that you would normally stick in the middle tier, but it doesn't seem like a great idea to me. -Yonik