Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-15928

Investigate changes in SERVER-72667: Add authorization checks for cluster checkMetadataConsistency command

    • 2

      Original Downstream Change Summary

      Introduces a new action type named "checkMetadataConsistency" that will be included in clusterAdmin and clusterManager built-in roles. Clearance on the new action is required to run the new "checkMetadataConsistency" command.

      Description of Linked Ticket

      Investigate and add the authorization checks for the new checkMetadataConsistency command.

      https://github.com/10gen/mongo/blob/c892ad5a89e92acfe9847cdd31469fba93e21363/src/mongo/s/commands/cluster_check_metadata_consistency_cmd.cpp#L107-L109

      The goal of this ticket is to add a new specific action type "checkMetadataConsistency" and include it in the following built-in roles:

      • clusterAdmin
      • clusterManager

      Additionally we should add tests to ensure that users without this privilege are not authorized to run the new command.

            Assignee:
            david.hou@mongodb.com David Hou
            Reporter:
            backlog-server-pm Backlog - Core Eng Program Management Team
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:
              39 weeks, 1 day ago