Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-4702

root role does have access to system.* collections

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 01112017-cleanup
    • Component/s: manual
    • Labels:
      None
    • Last comment by Customer:
      true

      Description

      When SERVER-16944 came in I asked Spencer Brody about the ability of the root role to access system.* collections.

      The docs say that's not the case, but that's not really accurate as the root role can already access system.indexes and system.namespaces so we should probably remove this line:

      root does not include any access to collections that begin with the system. prefix.

      and possible amend the next paragraph:

      For example, without the ability to insert data directly into the:data:system.users <admin.system.users> and system.roles collections in the admin database. root is not suitable for writing or restoring data that have these collections (e.g. with mongorestore.) To perform these kinds of restore operations, provision users with the restore role.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              ramon.fernandez Ramon Fernandez Marina
              Participants:
              Last commenter:
              Jonathan Dahl Jonathan Dahl
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since reply:
                5 years, 29 weeks, 2 days ago
                Date of 1st Reply: