Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-11617

Docs for SERVER-33999: Implement and test auth checks for a $changeStream against more than a single collection

    • Type: Icon: Task Task
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 3.7.4
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None

      Documentation Request Summary:

      In order to run a change stream on the whole database, a user needs the "find" and "changeStream" actions on the whole database. i.e. a role with

       {resource: {db: <dbname>, collection: ""}, actions: ["find", "changeStream"]}
      

      Similarly, a user needs those actions on any database, any collection to run a change stream on the whole cluster:

       {resource: {db: "", collection: ""}, actions: ["find", "changeStream"]}
      

      I don't see a DOCS ticket for the original change streams, but for change streams on single collections (db.coll.watch()), you need those actions on the particular collection only.

      Scope of changes:

      • update /changeStreams.txt page
      • all three methods
      • reference/privilege-actions since changeStreams was never added in 3.6

      Impact to other docs outside of this product:

      none but will need to see about driver examples

      MVP:

      Resources:

            Assignee:
            kay.kim@mongodb.com Kay Kim (Inactive)
            Reporter:
            kay.kim@mongodb.com Kay Kim (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              5 years, 36 weeks, 1 day ago