[SOLR-15073] Unsafe cast in SystemInfoHandler

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.6, 8.7
• Fix Version/s: 8.8, 9.0
• Assignee: Christine Poerschke
• Reporter: Nikolay Ivanov
• Created: 07/Jan/21 10:46
• Updated: 12/May/22 00:26
• Resolved: 25/Jan/21 17:53

Description

I have observed an unsafe cast in 

SystemInfoHandler::getSecurityInfo

Is this by design? Currently I have a custom AuthorizationPlugin that directly implements AuthorizationPlugin interface. With the latest solr version it is not permitted anymore. A workaround is to extend the RuleBasedAuthorizationPluginBase, which is not ideal imo. Please share your thoughts

Issue Links

• is related to: SOLR-14237 Add authenticated user principal in Solr admin UI
• links to: GitHub Pull Request #2210