Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-13586

Remove user cache invalidation from user management commands

    • Type: Icon: Task Task
    • Resolution: Unresolved
    • Priority: Icon: Major - P3 Major - P3
    • None
    • Affects Version/s: 2.6.0
    • Component/s: Internal Code, Security
    • Labels:
    • Server Security

      Currently we invalidate the user cache in every user and role management command, but the cache invalidation is then duplicated by the hooks in oplog application that also invalidate the cache. They are still currently necessary, however, so that when a mongos does a user or role modification it is viewable immediately via that mongos. Once we have a better story around cache invalidation in mongos, we may be able to change the commands to block until the process has updated its cache via the external notification system, and then we'll be able to remove the invalidation from the commands.

            backlog-server-security Backlog - Security Team
            spencer@mongodb.com Spencer Brody (Inactive)
            1 Vote for this issue
            1 Start watching this issue


                Error rendering 'slack.nextup.jira:slack-integration-plus'. Please contact your Jira administrators.