[SOLR-7890] By default require admin rights to access /security.json in ZK

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Component/s: security
• Assignee: Jan Høydahl
• Reporter: Jan Høydahl
• Created: 07/Aug/15 00:12
• Updated: 02/Dec/21 22:35
• Resolved: 02/Dec/21 22:35

Description

Perhaps VMParamsAllAndReadonlyDigestZkACLProvider should by default require admin access for read/write of /security.json, and other sensitive paths. Today this is left to the user to implement.

Also, perhaps factor out the already-known sensitive paths into a separate class, so that various ACLProvider implementations can get a list of paths that should be admin-only, read-only etc from one central place. Then 3rd party impls pulling ZK creds from elsewhere will still do the right thing in the future if we introduce other sensitive Znodes...

Issue Links

• is duplicated by: SOLR-10100 Hiding credentials from security.json when retrieving through /admin/zookeeper
• relates to: SOLR-11623 Every request handler in Solr should implement PermissionNameProvider interface
• requires: SOLR-4580 Support for protecting content in ZK