Apache/lucene
1
0
Fork 0
mirror of https://github.com/apache/lucene.git synced 2025-02-13 13:35:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

SOLR-6736: Fix authorization permissions

Browse Source
This commit is contained in:
Ishan Chattopadhyaya 2017-04-13 17:31:22 +05:30
parent 89f6d170f5
commit 6d948debc6
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
solr/core/src/java/org/apache/solr/handler/admin/ConfigSetsHandler.java
View File

@ -306,13 +306,15 @@ public class ConfigSetsHandler extends RequestHandlerBase implements PermissionN
@Override @Override
public Name getPermissionName(AuthorizationContext ctx) { public Name getPermissionName(AuthorizationContext ctx) {
switch (ctx.getHttpMethod()) { String a = ctx.getParams().get(ConfigSetParams.ACTION);
case "GET": if (a != null) {
return Name.CONFIG_READ_PERM; ConfigSetAction action = ConfigSetAction.get(a);
case "POST": if (action == ConfigSetAction.CREATE || action == ConfigSetAction.DELETE || action == ConfigSetAction.UPLOAD) {
return Name.CONFIG_EDIT_PERM; return Name.CONFIG_EDIT_PERM;
default: } else if (action == ConfigSetAction.LIST) {
return Name.CONFIG_READ_PERM;
}
}
return null; return null;
} }
}
} }