Respect the submission guidelines above! Drupal.org issue forks cause additional work for the project maintainer!
Setup
- Solr version: 8.8.0
- Drupal Core version: 9.4
- Search API version: 1.25
- Search API Solr version: 4.2.8
- Configured Solr Connector: solr_cloud
Issue
The following error occurs when clicking upload in the upload config set:
"Trying to make an unstrusted ConfigSet update on a trusted configSet"
steps to reproduce:
- enable a solr_cloud connector
- go to /admin/config/search/search-api/server/{core}/solr-admin/upload-configset
- click upload
Note that the form only shows a submit button.
We should document this requirement Upload a Configset:
Upload a configset, which is sent as a zipped file. A single, non-zipped file can also be uploaded with the filePath parameter.
This functionality is enabled by default, but can be disabled via a runtime parameter -Dconfigset.upload.enabled=false. Disabling this feature is advisable if you want to expose Solr installation to untrusted users (even though you should never do that!).
Comment | File | Size | Author |
---|---|---|---|
#7 | 3316055.patch | 4.67 KB | mkalkbrenner |
#4 | 3316055.patch | 3.18 KB | mkalkbrenner |
Comments
Comment #2
mpp CreditAttribution: mpp at AmeXio for District09 commentedComment #3
mkalkbrennerThat error message occurs if the basic authentication fails.
Did you configure basic authentication?
If not the issue is that uploading is offered at all. It should only be available in a trusted context.
Comment #4
mkalkbrennerComment #5
vlad.dancerAfter applying the patch and clearing cache we got:
I cant find SolrAdminTrustedContextSupportedAccessCheck class neither in patch nor in latest 4.x dev.
Comment #6
mkalkbrennerThere were massive git issues on drupal.org over the last two days.
I will upload a new patch.
Comment #7
mkalkbrennerComment #9
mkalkbrennerComment #10
mkalkbrenner