lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hoss Man (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (SOLR-7125) Allow clients to upload/download configs via CloudSolrClient
Date Wed, 18 Feb 2015 21:02:12 GMT

    [ https://issues.apache.org/jira/browse/SOLR-7125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14326552#comment-14326552
] 

Hoss Man edited comment on SOLR-7125 at 2/18/15 9:02 PM:
---------------------------------------------------------

Alan: i don't know all the details, but SOLR-6915 is pretty much on point here in terms of
letting solr read/write what it needs to in ZK, while some subset of users can modify configs,
while other clients/users may only have read access to ZK.

just because someone can create CloudSolrClient instance and get the list of active nodes
from ZK doesn't mean they can/should be allowed full write access to ZK.

----

EDIT: to clarify my point: i'm not saying we shouldn't support this in CloudSolrClient, i'm
saying *if* we support it, we need to keep the security conious use case in mind and ensure
we have a good story/docs for folks who care about things like SOLR-6915 ... maybe it "just
works" because the ZK credentials used when constructing the CloudSolrClient instance are
prevented from writing to those config nodes in these secure cases, and they returne a good
error message ... but we should think about that and test it.


was (Author: hossman):
Alan: i don't know all the details, but SOLR-6915 is pretty much on point here in terms of
letting solr read/write what it needs to in ZK, while some subset of users can modify configs,
while other clients/users may only have read access to ZK.

just because someone can create CloudSolrClient instance and get the list of active nodes
from ZK doesn't mean they can/should be allowed full write access to ZK.

> Allow clients to upload/download configs via CloudSolrClient
> ------------------------------------------------------------
>
>                 Key: SOLR-7125
>                 URL: https://issues.apache.org/jira/browse/SOLR-7125
>             Project: Solr
>          Issue Type: Improvement
>            Reporter: Alan Woodward
>            Assignee: Alan Woodward
>            Priority: Minor
>             Fix For: 5.1
>
>         Attachments: SOLR-7125.patch
>
>
> Adding new configs to ZK is still something of a pain point.  We should add some helper
methods to CloudSolrClient that make this easier.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


Mime
View raw message