Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-17743

Include nuxeo-elasticsearch-http-read-only in default distribution

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 7.3
    • Fix Version/s: 7.4
    • Component/s: Audit, Elasticsearch
    • Epic Link:
    • Tags:
    • Upgrade notes:
      Hide

      Elasticsearch http API is by default enabled for embedded node if enabled. The embedded node will only accept requests from local machine.

      Show
      Elasticsearch http API is by default enabled for embedded node if enabled. The embedded node will only accept requests from local machine.
    • Sprint:
      nxNag Sprint 7.4.3, nxNag Sprint 7.4.4, nxNag Sprint 7.4.5
    • Story Points:
      1

      Description

      Needed for Data Visualization.

      WARN

      • Is it really good to expose a third party API by default in the platform?
      • Even if inlcuded, should it be enabled by default?
      • it requires the elasticsearch backend to expose the http API (needs reinforcement of the security guideline when installing elasticsearch).

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: