-
Type:
Task
-
Resolution: Fixed
-
Priority:
Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
Fully Compatible
-
Server Security 2025-07-04, Server Security 2025-07-20, Server Security 2025-08-01
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Modify authorization_checks.cpp within getPrivilegesForAggregate to check each LiteParsedDocumentSource. If requiresAuthChecks() is true for a stage but its requiredPrivileges() returns an empty vector, return a Status(ErrorCodes::MissingAuthCheck).
Make sure to encapsulate this check with the feature flag created. That is to say, only the check should happen when the gFeatureFlagMandatoryAuthChecks featureflag is on.
- fixes
-
SERVER-106610 Review and Opt-Out Specific Aggregation Stages
-
- Closed
-