{"id":141,"date":"2013-04-30T14:37:51","date_gmt":"2013-04-30T13:37:51","guid":{"rendered":"http:\/\/www.francelabs.com\/blog\/?p=141"},"modified":"2016-09-21T14:36:33","modified_gmt":"2016-09-21T13:36:33","slug":"tutorial-on-authorizations-for-manifold-cf-and-solr","status":"publish","type":"post","link":"https:\/\/www.francelabs.com\/blog\/tutorial-on-authorizations-for-manifold-cf-and-solr\/","title":{"rendered":"Tutorial on Authorizations for Manifold CF and Solr"},"content":{"rendered":"

NOTE: If you are interested in using ManifoldCF with Solr, you may want to look at our Datafari software <\/a>, which combines Apache ManifoldCF with Solr, so it eases this kind of integration. The code is available on google code: https:\/\/github.com\/francelabs\/datafari<\/a><\/p>\n

Manifold CF (MCF) provides a early-binding authorization mechanism for file searchs. The aim of this entry is to will describe this mechanism, and then to show you the different steps needed to configure MCF and Solr to use this fonctionnality.<\/p>\n

MCF extracts ACLs from files at crawling-time, and injects them into Solr as specific fields for the Solr document.<\/p>\n

At query time, an external application can query Solr for documents that are available for a specific user profile. Solr handles the query, contacts the authority service of MCF in order to ask for information on the authenticated user, such as its group membership. Solr then performs the query and filters the query results with this information.<\/p>\n

The global architecture is described in the following diagram:<\/p>\n

\"\"<\/p>\n

Please note that MCF can take care of the autorisation mechanism, but authentication is not its job. You need an external application deals with authentication, and also secures the access to Solr. These parts, which are neither Solr nor MCF specific, won\u2019t be adressed in this tutorial.<\/strong><\/p>\n