The admin requests do have a collection name and it should rely on the request type
Adding a BasicAuth tag
Manually verified against http://svn.apache.org/repos/asf/lucene/dev/branches/lucene_solr_5_3 revision 1702367 following description of the problem on solr-user. Modified /security.json to add:
Ran curl -i to create a collection, and was challenged for a username/password.
Commit 1700811 from Noble Paul in branch 'dev/branches/lucene_solr_5_3'
[ https://svn.apache.org/r1700811 ]
SOLR-8004: RuleBasedAuthorization plugin does not work for the collection-admin-edit permission
Commit 1700786 from Noble Paul in branch 'dev/branches/branch_5x'
[ https://svn.apache.org/r1700786 ]
Commit 1700784 from Noble Paul in branch 'dev/trunk'
[ https://svn.apache.org/r1700784 ]