Uploaded image for project: 'Geode'
  1. Geode
  2. GEODE-6930

Lucene Functions specified using Internal Function's required permission, will be rejected by PCC

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.10.0
    • Component/s: lucene
    • Labels:

      Description

      When playing lucene app, I noticed the query is rejected with following error msg:
      2019-06-14T10:24:29.83-0700 [APP/PROC/WEB/0] OUT Caused by: org.apache.geode.security.NotAuthorizedException: developer_jNnlmXMEdwsrmaDayfNKg not authorized for *

      This is because all the lucene functions are implementing Internal Function but forgot to override it's getRequiredPermissions method. So it requires to have ResourcePermissions.ALL to execute.

      There're following 9 lucene functions:
      WaitUntilFlushedFunction (Need READ)
      LuceneQueryFunction (Need READ)
      IndexingInProgressFunction (Need READ)
      LuceneCreateIndexFunction (used by gfsh only, no need to change)
      LuceneDestroyIndexFunction (used by gfsh only, no need to change)
      LuceneDescribeIndexFunction (used by gfsh only, no need to change)
      LuceneSearchIndexFunction (used by gfsh only, no need to change)
      LuceneListIndexFunction (used by gfsh only, no need to change)
      LuceneGetPageFunction (Need READ)

      The 5 of them are only used by gfsh, which is the real "internal function".
      The other 4 will be called by client application, so they should specify ResourcePermissions.READ.

        Attachments

          Activity

            People

            • Assignee:
              zhouxj xiaojian zhou
              Reporter:
              zhouxj xiaojian zhou
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 1h
                1h