I am unable to execute commands on the cluster resource despite having the clusterAdmin role.
This is with master git commit 51aebc9b94c272eb251ff94d28be0c6fdd180de8 (binary downloaded from MCI)
mongos> db.version()
2.7.8-pre-
mongos> db.serverBuildInfo()
{
"version" : "2.7.8-pre-",
"gitVersion" : "51aebc9b94c272eb251ff94d28be0c6fdd180de8",
"OpenSSLVersion" : "",
"sysInfo" : "Darwin mci-osx108-2.build.10gen.cc 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan 6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64 BOOST_LIB_VERSION=1_49",
"loaderFlags" : "-fPIC -pthread -Wl,-bind_at_load -mmacosx-version-min=10.6",
"compilerFlags" : "-Wnon-virtual-dtor -Woverloaded-virtual -fPIC -fno-strict-aliasing -ggdb -pthread -Wall -Wsign-compare -Wno-unknown-pragmas -Winvalid-pch -pipe -Werror -O3 -Wno-unused-function -Wno-deprecated-declarations -mmacosx-version-min=10.6",
"allocator" : "system",
"versionArray" : [
2,
7,
8,
-100
],
"javascriptEngine" : "V8",
"bits" : 64,
"debug" : false,
"maxBsonObjectSize" : 16777216,
"ok" : 1
}
mongos> use admin
switched to db admin
mongos> db.auth('testuser', 'testpwd')
1
mongos> db.getUser('testuser')
{
"_id" : "admin.testuser",
"user" : "testuser",
"db" : "admin",
"roles" : [
{
"role" : "clusterAdmin",
"db" : "admin"
},
{
"role" : "dbAdminAnyDatabase",
"db" : "admin"
},
{
"role" : "readWriteAnyDatabase",
"db" : "admin"
},
{
"role" : "userAdminAnyDatabase",
"db" : "admin"
}
]
}
mongos> db.runCommand({getCmdLineOpts: 1})
{
"ok" : 0,
"errmsg" : "not authorized on admin to execute command { getCmdLineOpts: 1.0 }",
"code" : 13
}
mongos> show dbs
2014-10-08T18:33:52.465-0400 listDatabases failed:{
"ok" : 0,
"errmsg" : "not authorized on admin to execute command { listDatabases: 1.0 }",
"code" : 13
} at src/mongo/shell/mongo.js:47
mongos>
This does not happen with 2.7.7. I don't believe this happens with a replica set without sharding.
Assigning to andreas.nilsson@10gen.com on suggestion from spencer