Package com.lucidworks.cloud.api.solr

Class SolrAuthorizationComponent

java.lang.Object

com.lucidworks.cloud.api.solr.SolrAuthorizationComponent

public class SolrAuthorizationComponent
extends Object

Solr users can do federated search using "collection" or "shards" query params, thus bypassing our security enforcements. This helper class does additional authorization checks to forbid that. see APOLLO-3566

Field Summary

Fields

Modifier and Type	Field	Description
static final String	COLLECTIONS_PARAM
static final String	SHARDS_PARAM

Constructor Summary

Constructors

Constructor	Description
SolrAuthorizationComponent(CollectionComponent collectionComponent)

Method Summary

Modifier and Type	Method	Description
List<String>	checkSolrCollectionAndShardsParams(String searchClusterId, String collectionParam, String shardsParam, com.lucidworks.apollo.security.AuthorizationContext authorizationContext)
static List<String>	splitParamValue(String value)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

COLLECTIONS_PARAM

public static final String COLLECTIONS_PARAM

See Also:

• Constant Field Values

SHARDS_PARAM

public static final String SHARDS_PARAM

See Also:

• Constant Field Values

Constructor Details

SolrAuthorizationComponent

public SolrAuthorizationComponent(CollectionComponent collectionComponent)

Method Details

checkSolrCollectionAndShardsParams

public List<String> checkSolrCollectionAndShardsParams(String searchClusterId,
 String collectionParam,
 String shardsParam,
 com.lucidworks.apollo.security.AuthorizationContext authorizationContext)
                                                throws Exception

Throws:

Exception

splitParamValue

public static List<String> splitParamValue(String value)