[GEODE-6930] Lucene Functions specified using Internal Function's required permission, will be rejected by PCC

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.10.0
• Component/s: lucene
• Labels: GeodeCommons
• Assignee: Xiaojian Zhou
• Reporter: Xiaojian Zhou
• Created: 29/Jun/19 00:27
• Updated: 26/Sep/19 18:02
• Resolved: 01/Jul/19 23:21

Description

When playing lucene app, I noticed the query is rejected with following error msg:
2019-06-14T10:24:29.83-0700 [APP/PROC/WEB/0] OUT Caused by: org.apache.geode.security.NotAuthorizedException: developer_jNnlmXMEdwsrmaDayfNKg not authorized for *

This is because all the lucene functions are implementing Internal Function but forgot to override it's getRequiredPermissions method. So it requires to have ResourcePermissions.ALL to execute.

There're following 9 lucene functions:
WaitUntilFlushedFunction (Need READ)
LuceneQueryFunction (Need READ)
IndexingInProgressFunction (Need READ)
LuceneCreateIndexFunction (used by gfsh only, no need to change)
LuceneDestroyIndexFunction (used by gfsh only, no need to change)
LuceneDescribeIndexFunction (used by gfsh only, no need to change)
LuceneSearchIndexFunction (used by gfsh only, no need to change)
LuceneListIndexFunction (used by gfsh only, no need to change)
LuceneGetPageFunction (Need READ)

The 5 of them are only used by gfsh, which is the real "internal function".
The other 4 will be called by client application, so they should specify ResourcePermissions.READ.

Issue Links

• links to: GitHub Pull Request #3763
• links to: GitHub Pull Request #3770