Mailing-List: contact solr-commits-help@lucene.apache.org; run by ezmlm
Precedence: bulk
Reply-To: solr-dev@lucene.apache.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: Apache Wiki <wikidiffs@apache.org>
To: Apache Wiki <wikidiffs@apache.org>
Date: Mon, 09 May 2011 21:35:38 -0000
Message-ID: <20110509213538.92732.88906@eos.apache.org>
Subject: 
 =?utf-8?q?=5BSolr_Wiki=5D_Update_of_=22SolrSecurity=22_by_JanHoydahl?=

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Solr Wiki" for chan=
ge notification.

The "SolrSecurity" page has been changed by JanHoydahl.
The comment on this change is: Added comments to ManifoldCF security.
http://wiki.apache.org/solr/SolrSecurity?action=3Ddiff&rev1=3D25&rev2=3D26

--------------------------------------------------

  =

  =3D=3D Document Level Security =3D=3D
  =

+ =3D=3D=3D Manifold CF (Connector Framework) =3D=3D=3D
+ One way to add document level security to your search is through Apache [=
[http://incubator.apache.org/connectors/|ManifoldCF]]. ManifoldCF "defines =
a security model for target repositories that permits them to enforce sourc=
e-repository security policies".
+ =

+ It works by adding security tokens from the source repositories as metada=
ta on the indexed documents. Then, at query time, a Search Component adds a=
 filter to all queries, matching only documents the logged-in user is allow=
ed to see. ManifoldCF supports AD security out of the box.
+ =

  =3D=3D=3D Write Your Own RequestHandler or SearchComponent =3D=3D=3D
  *Stub - this is incomplete*
+ =

+ If ManifoldCF does not solve your need, first consider writing a Manifold=
CF plugin. Or roll your own.
  =

  If you need permission based authentication -- where user A can update do=
cument 1 and 2, but not 3 -- you will need to augment the request with user=
 information.  Either you can add parameters to the query string (?u=3DXXX&=
p=3DYYY) or use a custom dispatcher filter that augments the context:
  {{{
@@ -173, +180 @@

  =

  }}}
  =

- =3D=3D=3D Manifold CF (Connector Framework) =3D=3D=3D
- One way to add document level security to your search is through Apache [=
[http://incubator.apache.org/connectors/|ManifoldCF]]. ManifoldCF "defines =
a security model for target repositories that permits them to enforce sourc=
e-repository security policies".
- =

  =3D=3D Streaming Consideration =3D=3D
  =

  If streaming is enabled, you need to make sure Solr is as secure as it ne=
eds to be.  When streaming is enabled, the parameters "stream.url" will go =
to a remote site and download the content.  Likewise, "stream.file" will re=
ad a file on disk.