Details
-
Bug
-
Resolution: Duplicate
-
Major - P3
-
None
-
None
-
None
-
*Location*: https://docs.mongodb.com/manual/reference/built-in-roles/
*User-Agent*: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36
*Screen Resolution*: 1440 x 900
Description
ClusterManager role also has write privileges to config.tags since v3.0:
https://github.com/mongodb/mongo/blob/v3.0/src/mongo/db/auth/role_graph_builtin_roles.cpp#L400-l403