Manticore Search 27.1.5 introduces built-in authentication and authorization for SQL/MySQL, HTTP/HTTPS, and replication. The system supports mysql_native_password, HTTP Basic auth, and Bearer tokens, with five permission types: read, write, schema, replication, and admin. Setup involves enabling auth in the config, bootstrapping a first admin user, then creating least-privilege users with targeted grants. Explicit deny rules (WITH ALLOW 0) override any matching allow rules. A staged rollout checklist is provided for existing deployments, covering client inventory, staging validation, credential rotation, and replication cluster considerations.
Table of contents
What Manticore AddsEnable AuthenticationBootstrap the First AdministratorCreate UsersConnect with SQL and HTTPTesting After Enabling AuthenticationHow Manticore Checks What Is Allowed and DeniedRoll Out Access on an Existing DeploymentFull Reference151 Impressions