Details
-
Small
-
0.3
-
KANBAN BUCKET
Description
As of 3.2.11/3.4.0, mongorestore can use --oplogReplay with only the 'restore' role. A custom role with 'anyAction on anyResource' is not required. Reference: SERVER-25994
At a minimum these pages are affected:
- https://docs.mongodb.com/manual/tutorial/backup-and-restore-tools/index.html#access-control
- https://docs.mongodb.com/manual/reference/program/mongorestore/#required-access
- https://docs.mongodb.com/manual/reference/built-in-roles/index.html#restore
Other pages may have this issue as well – I didn't do an exhaustive search.
Attachments
Issue Links
- is duplicated by
-
DOCS-9467 Docs for SERVER-25994: Allow applyOps to validate authorization permissions at the operation level
-
- Closed
-
- is related to
-
DOCS-10944 Clarify that using mongorestore with --oplogReplay option means you must restore the full dump
-
- Closed
-