Uploaded image for project: 'Solr'
  1. Solr
  2. SOLR-15825

Permission "all" should include "security-edit"

    XMLWordPrintableJSON

Details

    Description

      With basic authentication and rule-based authorization, a user with permission "all" does not have access to the Security panel in the UI.

      Refer to the security.json attached. (credentials: admin/admin)

      The UI displays message : "You do not have permission to view the security panel."

      Workaround: add permissions "security-edit" and "security-read" to the role (before "all").

      According to thelabdude, this is an issue in the UI only:

      this is a bug in the security UI only (not the backend),
      specifically right here:
      https://urldefense.com/v3/__https://github.com/apache/solr/blob/main/solr/webapp/web/js/angular/controllers/security.js*L344__;Iw!!Obbck6kTJA!L1x2jPaH5Hj7OSGuRO9kR5aHJK0h4ekxPfpNGckK9JglMRyaomgDN8ikSeW5f96k$ .

      Attachments

        1. security.json
          0.5 kB
          Isabelle Giguere

        Activity

          People

            thelabdude Timothy Potter
            igiguere Isabelle Giguere
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 40m
                40m