Isabelle Giguere created SOLR-15825:
---------------------------------------
Summary: Permission "all" should include "security-edit"
Key: SOLR-15825
URL: https://issues.apache.org/jira/browse/SOLR-15825
Project: Solr
Issue Type: Bug
Security Level: Public (Default Security Level. Issues are Public)
Components: Admin UI, Authorization, Security UI
Affects Versions: 8.11
Reporter: Isabelle Giguere
Attachments: security.json
With basic authentication and rule-based authorization, a user with permission
"all" does not have access to the Security panel in the UI.
Refer to the security.json attached. (credentials: admin/admin)
The UI displays message : "You do not have permission to view the security
panel."
Workaround: add permissions "security-edit" and "security-read" to the role
(before "all").
According to [~thelabdude], this is an issue in the UI only:
{quote}
this is a bug in the security UI only (not the backend),
specifically right here:
https://urldefense.com/v3/__https://github.com/apache/solr/blob/main/solr/webapp/web/js/angular/controllers/security.js*L344__;Iw!!Obbck6kTJA!L1x2jPaH5Hj7OSGuRO9kR5aHJK0h4ekxPfpNGckK9JglMRyaomgDN8ikSeW5f96k$
.
{quote}
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
