- insert command privilege check incorrect for system.indexes; should be using checkAuthForInsert.
- update command ignoring upsert privilege check; should be using checkAuthForUpdate.
- write commands privilege check should be using checkAuthForCommand instead of deprecated addRequiredPrivileges.