-
Type: Task
-
Resolution: Done
-
Priority: Major - P3
-
None
-
Component/s: None
-
None
MongoDB provides a "localhost exception" for executing unauthorized operations from localhost when authentication is enabled but no users have yet been added. In versions previous to 2.8 any operation could be executed. Starting in MongoDB 2.8 the addUser command is the only command requiring authorization that can be run before the first user is added.
See DRIVERS-169 for a specific problem caused by this change. Driver test suites that assume all normal operations can be performed on localhost if no users exist will require changes.
- depends on
-
MOTOR-38 Fix Motor's direct tests for MongoDB >= 2.7.1 with auth
- Closed
-
PYTHON-715 Fix tests for MongoDB >= 2.7.1 running with authentication
- Closed
-
SERVER-12621 Reduce localhost exception permissions
- Closed
- related to
-
DRIVERS-169 Work around localhost exception issues in addUser helpers
- Closed