授予对集合的权限(Apache Solr)

axr492tv  于 2022-12-23  发布在  Solr
关注(0)|答案(1)|浏览(178)

我有这样的security.json配置如何向google.cloud.integration.1集合授予单独的权限?
在当前配置下,无法删除google.cloud.integration.1集合,出现错误403
solr版本8.11

{
    "authentication": {
        "class": "com.us.CustomSSLAuthenticationPlugin"
    },
    "authorization": {
        "class": "com.us.BasedAuthorizationPlugin",
        "user-role": {
            "CN=...": [
                "admin_ro"
            ]
        },
        "permissions": [
            {
                "collection": "google.cloud.integration.1",
                "path": "/admin/collections",
                "params": {
                    "action": [
                        "LIST",
                        "LISTALIASES",
                        "CREATEALIAS",
                        "DELETEALIAS",
                        "CLUSTERSTATUS",
                        "ADDREPLICA"
                    ]
                },
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "admin_ro",
                    "solr-internal-traffic"
                ]
            },
            {
                "collection": null,
                "path": "/admin/collections",
                "params": {
                    "action": [
                        "LIST",
                        "LISTALIASES",
                        "CLUSTERSTATUS"
                    ]
                },
                "role": [
                    "rb55_bhb_epkid_rw",
                    "admin_ro",
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "collection": null,
                "path": "/admin/collections",
                "params": {
                    "action": [
                        "LIST",
                        "LISTALIASES",
                        "CREATEALIAS",
                        "DELETEALIAS",
                        "CLUSTERSTATUS",
                        "ADDREPLICA"
                    ]
                },
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "collection": null,
                "path": "/admin/configs",
                "params": {
                    "action": [
                        "LIST"
                    ]
                },
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "collection": null,
                "path": "/admin/configs",
                "params": {
                    "action": [
                        "LIST",
                        "CREATE",
                        "DELETE",
                        "UPDATE"
                    ]
                },
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "update",
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "config-edit",
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "schema-edit",
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "security-edit",
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "core-admin-edit",
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "collection-admin-edit",
                "role": [
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "read",
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "config-read",
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "schema-read",
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "security-read",
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "core-admin-read",
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "collection-admin-read",
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "metrics-read",
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "jmx_ro",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "all",
                "role": [
                    "admin_ro",
                    "admin_rw",
                    "admin_ow",
                    "solr-internal-traffic"
                ]
            },
            {
                "name": "read",
                "role": "default-deny-all"
            },
            {
                "name": "schema-read",
                "role": "default-deny-all"
            },
            {
                "name": "config-read",
                "role": "default-deny-all"
            },
            {
                "name": "collection-admin-read",
                "role": "default-deny-all"
            },
            {
                "name": "metrics-read",
                "role": "default-deny-all"
            },
            {
                "name": "core-admin-read",
                "role": "default-deny-all"
            },
            {
                "name": "security-read",
                "role": "default-deny-all"
            },
            {
                "name": "update",
                "role": "default-deny-all"
            },
            {
                "name": "schema-edit",
                "role": "default-deny-all"
            },
            {
                "name": "config-edit",
                "role": "default-deny-all"
            },
            {
                "name": "collection-admin-edit",
                "role": "default-deny-all"
            },
            {
                "name": "core-admin-edit",
                "role": "default-deny-all"
            },
            {
                "name": "security-edit",
                "role": "default-deny-all"
            },
            {
                "name": "all",
                "role": "default-deny-all"
            }
        ]
    }
}

我想使集合google.cloud.integration.1可以被删除

z8dt9xmd

z8dt9xmd1#

如果要使用以下命令删除集合
https://您的网址/管理员/集合?操作=删除&名称=谷歌云。集成。1
我建议您在此处添加“DELETE”操作
“收藏”:“谷歌云集成.1”,“路径”:“/管理员/集合”,“参数”:{“行动”:[“列表”、“列表项”、“创建别名”、“删除别名”、“群集状态”、“地址”、“删除”] },

相关问题