Enforce Auth Checks in getPrivilegesForAggregate

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Fixed
    • Priority: Major - P3
    • 8.3.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • None
    • Server Security
    • Fully Compatible
    • Server Security 2025-07-04, Server Security 2025-07-20, Server Security 2025-08-01
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Modify authorization_checks.cpp within getPrivilegesForAggregate to check each LiteParsedDocumentSource. If requiresAuthChecks() is true for a stage but its requiredPrivileges() returns an empty vector, return a Status(ErrorCodes::MissingAuthCheck).

       

      Make sure to encapsulate this check with the feature flag created. That is to say, only the check should happen when the gFeatureFlagMandatoryAuthChecks featureflag is on. 

            Assignee:
            Kat Cheng (Inactive)
            Reporter:
            Adrian Gonzalez Montemayor
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: