Ensure that QE-encrypted writes are to QE-encrypted collections

    • Type: Improvement
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • Server Security
    • None
    • 3
    • TBD
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      We never want to write QE-encrypted data to collections without QE schemas, since this presents problems for compaction and cleanup later. Upon any write with an encryptionInformation field, ensure that the collection being written to exists and has a QE schema (i.e. an encryptedFields set in its collection options). We won't check for schema matching in this ticket, that will be done in https://jira.mongodb.org/browse/SERVER-104797.

      As part of this work, investigate possible impact on mongorestore.

            Assignee:
            Unassigned
            Reporter:
            Gabriel Marks
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: