[CONNECTORS-1286] Solr Plugin: Add support for User Principal

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: ManifoldCF 2.3
• Fix Version/s: ManifoldCF next
• Component/s: Solr 6.x component
• Assignee: Karl Wright
• Reporter: Konrad Holl
• Created: 09/Mar/16 16:09
• Updated: 20/Sep/18 09:08

Description

I’m using ManifoldCF 2.3 with Solr 5.4.1 and the Velocity templating engine. I needed to do searches with ACLs enabled and installed the plugin. Unfortunately it is not possible to use the login information provided by Jetty in the Solr plugin.

As of Solr 5.3 it is possible to extract the authenticated user from the SolrQueryRequest object: http://lucene.apache.org/solr/5_3_0/solr-core/org/apache/solr/request/SolrQueryRequest.html#getUserPrincipal(). I added these lines to the code in org.apache.solr.mcf.ManifoldCFSearchComponent before the evaluation of parameters for authenticated user name:

    String authDomain = (String)args.get("AuthDomain");

    if (rb.req.getUserPrincipal() != null) {
                domainMap.put("", rb.req.getUserPrincipal().getName() + ((authDomain == null) ? "" : "@" + authDomain));
    }
    else {
      // Get the authenticated user name from the parameters

I also needed an additional setting “authDomain” in the search component configuration (solrconfig.xml). Now I can use Velocity even for documents with ACLs :o)