如何限制对SOLR特定页面（例如“ Core Admin”）的访问？

Question

I can't restrict access to SOLR's "Core Admin" page which comes in the main page of SOLR web console.(Located at the left hand side menu). I followed the SOLR Security wiki page tutorials to enable login based authentication in Apache Tomcat 7. Then in my SOLR's web.xml file, I added the following url pattern elements:

...
<url-pattern>/select/*</url-pattern>
<url-pattern>/#/~cores/*</url-pattern>
<url-pattern>/update/*</url-pattern>
<url-pattenr>/collection1/*</url-pattern>
...

Then when I go the "Core Admin" page in my browser window, it does not ask for any credentials. What would be the cause of this problem ?

Thanks in advance.

Answer 1

Hmm I checked the Tomcat's access logs and find the following related to requesting the core admin page:

127.0.0.1 - - [05/Jul/2015:21:59:49 +0300] "GET /solr/admin/cores?wt=json&_=1436122789842 HTTP/1.1" 200 862
127.0.0.1 - - [05/Jul/2015:21:59:49 +0300] "GET /solr/admin/cores?wt=json&_=1436122789864 HTTP/1.1" 200 862
127.0.0.1 - admin [05/Jul/2015:21:59:49 +0300] "GET /solr/tpl/cores.html?_=1436122789875 HTTP/1.1" 200 6973