Enforce Auth Checks in getPrivilegesForAggregate

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • Server Security
    • Server Security 2025-07-04
    • None
    • 3
    • TBD
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Modify authorization_checks.cpp within getPrivilegesForAggregate to check each LiteParsedDocumentSource. If requiresAuthChecks() is true for a stage but its requiredPrivileges() returns an empty vector, return a Status(ErrorCodes::MissingAuthCheck).

       

      Make sure to encapsulate this check with the feature flag created. That is to say, only the check should happen when the gFeatureFlagMandatoryAuthChecks featureflag is on. 

            Assignee:
            Kat Cheng
            Reporter:
            Adrian Gonzalez Montemayor
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: