Dear solr community, I would like to create two users in solr: An admin and a dev.The dev should not be able to edit the solr metadata. This user should not be able to use solr.add or solr delete, I would like him only to be able to use solr.search for our metadata solr-core (in python pysolr).
However, the user can always use solr.add and solr.delete, no matter what permissions I set for him. Here is my security.json:
{
"authentication":{
"blockUnknown":true,
"class":"solr.BasicAuthPlugin",
"credentials":{
"my_admin":"<creds>",
"my_dev":"<creds>"},
"forwardCredentials":false,
"":{"v":0}},
"authorization":{
"class":"solr.RuleBasedAuthorizationPlugin",
"user-role":{
"my_admin":["admin"],
"my_dev":["dev"]},
"permissions":[
{
"name":"security-edit",
"role":["admin"],
"index":1},
{
"name":"read",
"role":["dev"],
"index":2}],
"":{"v":0}}
}
I also tried `zk-read`, `metics-read`, `security-read`,
`collection-admin-read` instead of `read`, always with the same result.
The user my_dev can always use solr.add and solr.delete.
Greetings Martin -- Martin Schober Arbeitsgruppe: Faserbahnarchitektur (FA) Institut für Neurowissenschaften und Medizin Strukturelle und funktionelle Organisation des Gehirns (INM-1) Telefon: +49 2461 61-9148 E-Mail: m.scho...@fz-juelich.de Geb. 15.9, Raum 4017 Homepage: http://www.fz-juelich.de/SharedDocs/Personen/INM/INM-1/DE/Schober_Martin.html --------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht, Prof. Dr. Frauke Melchior --------------------------------------------------------------------------------------------- ---------------------------------------------------------------------------------------------
smime.p7s
Description: S/MIME Cryptographic Signature
