I'm trying to create two users: an admin ide
who has all permissions, and a dev
user who can only query the /select
path and a specific collection collec1
.
I used the Rule-Based Authorization Plugin
and I have the following security.json
file:
"authorization":{
"class":"solr.RuleBasedAuthorizationPlugin",
"permissions":[
{
"name":"read2",
"role":["read2"],
"collection":["collec1"],
"path":["/select"],
"method":["GET"],
"params":{},
"index":1},
{
"name":"all",
"role":"admin",
"index":2}],
"user-role":{
"ide":"admin",
"dev":["read2"],
},
"":{"v":0}}
I made sure to put the more specific permission on top.
When I try to query the collection with dev
user, I get an error 403. Any would help would be appreciated.