RANGER-5384: basic-auth header should not be set in Solr requests when username or password is empty

Author: mneethiraj

security-admin/src/main/java/org/apache/ranger/solr/SolrUtil.java

@@ -19,6 +19,7 @@
 
 package org.apache.ranger.solr;
 
+import org.apache.commons.lang3.StringUtils;
 import org.apache.ranger.common.MessageEnums;
 import org.apache.ranger.common.PropertiesUtil;
 import org.apache.ranger.common.RESTErrorUtil;
@@ -81,7 +82,7 @@ public QueryResponse runQuery(SolrClient solrClient, SolrQuery solrQuery) throws
                 String       username = PropertiesUtil.getProperty("ranger.solr.audit.user");
                 String       password = PropertiesUtil.getProperty("ranger.solr.audit.user.password");
 
-                if (username != null && password != null) {
+                if (StringUtils.isNotBlank(username) && StringUtils.isNotBlank(password)) {
                     req.setBasicAuthCredentials(username, password);
                 }