Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-4702

root role does have access to system.* collections

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • 01112017-cleanup
    • manual
    • None
    • true

    Description

      When SERVER-16944 came in I asked spencer about the ability of the root role to access system.* collections.

      The docs say that's not the case, but that's not really accurate as the root role can already access system.indexes and system.namespaces so we should probably remove this line:

      root does not include any access to collections that begin with the system. prefix.

      and possible amend the next paragraph:

      For example, without the ability to insert data directly into the:data:system.users <admin.system.users> and system.roles collections in the admin database. root is not suitable for writing or restoring data that have these collections (e.g. with mongorestore.) To perform these kinds of restore operations, provision users with the restore role.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              ramon.fernandez@mongodb.com Ramon Fernandez Marina
              Jonathan Dahl Jonathan Dahl
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                6 years, 28 weeks, 5 days ago