Uploaded image for project: 'Java Driver'
  1. Java Driver
  2. JAVA-2656

Deprecate MongoClient constructors that take multiple credentials.

    XMLWordPrintableJSON

Details

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Major - P3 Major - P3
    • 3.6.0
    • None
    • API, Configuration
    • None

    Description

      As a consequence of privilege delegation in MongoDB, a MongoClient must eagerly authenticate all credentials that it has been provided. It does not know whether a user has been granted a privilege in another database (e.g. a user defined in database "db1" may have been granted a privilege to read from database "db2"). This makes it dangerous in general to create a MongoClient with more than one credential.

      In addition, the session support added in MongoDB 3.6 requires that only a single user is authenticated.

      Attachments

        Activity

          People

            jeff.yemin@mongodb.com Jeffrey Yemin
            rathi.gnanasekaran Rathi Gnanasekaran
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: