[
https://issues.apache.org/jira/browse/SOLR-6925?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14281582#comment-14281582
]
Alexandre Rafalovitch commented on SOLR-6925:
---------------------------------------------
I think hiding managed schema file in the ShowFileHandler is related to this
change too. Can we re-enable displaying that file, since we are read-only now
and there is no other easy way to see what the dynamic schema has evolved to.
The [related
code|https://github.com/apache/lucene-solr/blob/db33df44c037e04fea9ac3e391ef79c0d6ae04f4/solr/core/src/java/org/apache/solr/handler/admin/ShowFileRequestHandler.java#L279].
> Back out changes having to do with SOLR-5287 (editing configs from admin UI)
> ----------------------------------------------------------------------------
>
> Key: SOLR-6925
> URL: https://issues.apache.org/jira/browse/SOLR-6925
> Project: Solr
> Issue Type: Bug
> Affects Versions: 5.0, Trunk
> Reporter: Erick Erickson
> Assignee: Erick Erickson
> Priority: Blocker
> Fix For: 5.0, Trunk
>
> Attachments: SOLR-6925.patch
>
>
> Should have something today/tomorrow. The history here is that I had this
> bright idea to edit files directly from the admin UI, especially schema.xml
> and solrxconifg.xml. Brilliant I sez to myself... except it's a significant
> security hole and I'm really glad that was pointed out before we released it
> in 4x.
> So we pulled it completely from 4.x and made it something in 5.x (then trunk)
> that you could enable (disabled by default) if you wanted to live dangerously
> and "we'd deal with it later". Well it's later.
> Given all the work for managed schemas and the like in the interim, I think
> this is cruft that should be removed completely from current trunk and 5x.
> Marking it as a blocker so we don't release 5x with this in it or we'll have
> back-compat issues. Should have a fix in very quickly.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
