0

I'm trying to create two users: an admin ide who has all permissions, and a dev user who can only query the /select path and a specific collection collec1.

I used the Rule-Based Authorization Plugin and I have the following security.json file:

"authorization":{
    "class":"solr.RuleBasedAuthorizationPlugin",
    "permissions":[
      {
        "name":"read2",
        "role":["read2"],
        "collection":["collec1"],
        "path":["/select"],
        "method":["GET"],
        "params":{},
        "index":1},
      {
        "name":"all",
        "role":"admin",
        "index":2}],
    "user-role":{
      "ide":"admin",
      "dev":["read2"],
    },
    "":{"v":0}}

I made sure to put the more specific permission on top. When I try to query the collection with dev user, I get an error 403. Any would help would be appreciated.

cdaveau
  • 129
  • 1
  • 7

0 Answers0