Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-11827

Allow user defined roles on non-admin databases to grant permission for users to change their own passwords

    XMLWordPrintableJSON

Details

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major - P3 Major - P3
    • 2.5.5
    • 2.5.4
    • Security, Usability
    • None
    • Minor Change
    • ALL

    Description

      Currently the "changeOwnPassword" action needs to be granted to the cluster resource to be effective in allowing a user to change their own password. But roles on non-admin dbs can't have privileges on the cluster resource. Instead, permission to change one's own password should be based on the possession of changeOwnPassword on the database resource for the database the user is defined on.

      Attachments

        Activity

          People

            spencer@mongodb.com Spencer Brody (Inactive)
            spencer@mongodb.com Spencer Brody (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: