[SOLR-16944] /api/node/health should be governed by "health" permission - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 9.4
Component/s: security
Labels:
None

Description

The /solr/admin/info/health v1 API (HealthCheckHandler) is governed by HEALTH_PERM, while the new v2 API /api/node/health uses CONFIG_READ_PERM. The V2 API should also use HEALTH_PERM.

Attachments

Issue Links

links to

GitHub Pull Request #1858

Activity

People

Assignee:: Jan Høydahl

Reporter:: Jan Høydahl

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 22/Aug/23 16:24

Updated:: 15/Oct/23 20:13

Resolved:: 22/Aug/23 18:49

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

20m