Thanks for the quick reply.  I'm opening a bug.

I have added the permissions to security edit and read, for now.

Isabelle Giguère
Computational Linguist & Java Developer
Linguiste informaticienne & développeur java


________________________________
De : Timothy Potter <thelabd...@gmail.com>
Envoyé : 30 novembre 2021 12:31
À : users@solr.apache.org <users@solr.apache.org>
Objet : [EXTERNAL] - Re: Permission "all" does not include security-edit

CAUTION: This email originated from outside of the organization. Do not click 
links or open attachments unless you recognize the sender and know the content 
is safe. If you feel that the email is suspicious, please report it using 
PhishAlarm.


Hi Isabelle,

Yes, this is a bug in the security UI only (not the backend),
specifically right here:
https://urldefense.com/v3/__https://github.com/apache/solr/blob/main/solr/webapp/web/js/angular/controllers/security.js*L344__;Iw!!Obbck6kTJA!L1x2jPaH5Hj7OSGuRO9kR5aHJK0h4ekxPfpNGckK9JglMRyaomgDN8ikSeW5f96k$
 .
Please file a JIRA as a minor (since there's an easy work-around); I'm
not sure what the right solution here would be though ... probably
have to have the UI look for "all" if "security-edit" is not
explicitly mapped.

A quick work-around would also be to specifically assign the
"security-edit" and "security-read" permissions to the "admin" role.

Cheers,
Tim

On Tue, Nov 30, 2021 at 9:49 AM Isabelle Giguere
<igigu...@opentext.com.invalid> wrote:
>
> Hi;
>
> With basic authentication and rule-based authorization, a user with 
> permission "all" does not have access to the Security panel in the UI.  Refer 
> to the security.json attached.
>
> The UI displays message : "You do not have permission to view the security 
> panel."
>
> Before I open a ticket, I would like to know if this is a bug or a feature ?
>
> If it's a feature, then, it should be part of the clarifications to the 
> documentation.  
> https://urldefense.com/v3/__https://issues.apache.org/jira/browse/SOLR-15770__;!!Obbck6kTJA!L1x2jPaH5Hj7OSGuRO9kR5aHJK0h4ekxPfpNGckK9JglMRyaomgDN8ikSQngEC0G$
>
> Thanks;
>
> Isabelle Giguère
> Computational Linguist & Java Developer
> Linguiste informaticienne & développeur java
>
>

Reply via email to