[prev in list] [next in list] [prev in thread] [next in thread] 

List:       solr-user
Subject:    Re: Safeguards for stray commands from deleting solr data
From:       Erick Erickson <erickerickson () gmail ! com>
Date:       2014-05-30 15:41:28
Message-ID: CAN4YXvdp=W3fKqkP0qTZkxzVYvWCdpYKuU=hY0DnNi-sh2Qq2A () mail ! gmail ! com
[Download RAW message or body]


Not unless you disable the update handler completely. Assuming you have
sensitive data, you really need to secure your Solr server behind an app
though.

Best,
Erick


On Thu, May 29, 2014 at 9:12 AM, Joshi, Shital <Shital.Joshi@gs.com> wrote:

> Hi,
>
> What are ways to prevent someone executing random delete commands against
> Solr? Like:
>
> curl http://solr.com:8983/solr/core/update?commit=true -H "Content-Type:
> text/xml" --data-binary '<delete><query>*:*</query></delete>'
>
> I understand we can do IP based access (change /etc/jetty.xml). Is there
> anything Solr provides out of the box?
>
> Thanks!
>
>
>
>


[prev in list] [next in list] [prev in thread] [next in thread]