Solr User Permission Configuration and Management

Scenario

On Manager, you can create a custom user and configure permissions for the user to use the Solr system.

Solr permissions in security mode need to be managed whereas those in normal mode do not.

Prerequisites

• The MRS cluster administrator has understood the permission requirements for the Solr system.
• You have logged in to Manager.

Permission Description

• If a user belongs to the Solr user group, the user can access the Solr Admin page, create related collections, and has read/write permission on the created collections.
• If a user belongs to the Solr user group and is assigned read/write permission on created collections, the user can perform read/write/delete operations on the collections created by the user and the collections the user has permission. However, the user cannot add or delete replicas for collections created by other users.
• If a user does not belong to the Solr user group but is assigned permission of the Solr administration group, the user can access the Solr Admin page, create collections, and has read/write permission on all collections.
• If a user does not belong to the Solr user group and is not assigned permission of the Solr administration group, the user cannot access the Solr Admin page.
• If the created user does not belong to the Solr usergroup group but belongs to the supergroup group, the user can access the Solr Admin page and has the read and write permissions on all collections.
• When a user accesses Solr on the Hue page, it is recommended that a Hue user be used.
• When a user uses HBaseIndexer in Solr over HBase to create a collection, the user must belong to the Solr, HDFS and HBase user groups and have read, write, creation, and management permission on the tables and collections to be operated.
• When a user uses the tool in Solr over HDFS to create a collection, the user must belong to the Solr and HDFS user groups and have read, write, and management permission on the files to be indexed as well as read/write permission on the corresponding collections.

Procedure

1. Click System.
2. In the Permission area, click User.
3. On the user list page, click Create User.
4. Set the following parameters:
   • Username: The username must be unique in the system.
   • User Type: Select Human-machine, which indicates that the account is a human-machine account.
   • Password: Enter the default password.
   • Confirm Password: Enter the password again.
   • User Group: Click Add, select the Solr user group, and click OK.
   • Primary Group: Select the Solr user group.

5. (Optional) Set Role and Description based on the site requirements.
6. Click OK. The human-machine user is created.