Description
I am unable to execute commands on the cluster resource despite having the clusterAdmin role.
This is with master git commit 51aebc9b94c272eb251ff94d28be0c6fdd180de8 (binary downloaded from MCI)
mongos> db.version()
|
2.7.8-pre-
|
mongos> db.serverBuildInfo()
|
{
|
"version" : "2.7.8-pre-",
|
"gitVersion" : "51aebc9b94c272eb251ff94d28be0c6fdd180de8",
|
"OpenSSLVersion" : "",
|
"sysInfo" : "Darwin mci-osx108-2.build.10gen.cc 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan 6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64 BOOST_LIB_VERSION=1_49",
|
"loaderFlags" : "-fPIC -pthread -Wl,-bind_at_load -mmacosx-version-min=10.6",
|
"compilerFlags" : "-Wnon-virtual-dtor -Woverloaded-virtual -fPIC -fno-strict-aliasing -ggdb -pthread -Wall -Wsign-compare -Wno-unknown-pragmas -Winvalid-pch -pipe -Werror -O3 -Wno-unused-function -Wno-deprecated-declarations -mmacosx-version-min=10.6",
|
"allocator" : "system",
|
"versionArray" : [
|
2,
|
7,
|
8,
|
-100
|
],
|
"javascriptEngine" : "V8",
|
"bits" : 64,
|
"debug" : false,
|
"maxBsonObjectSize" : 16777216,
|
"ok" : 1
|
}
|
mongos> use admin
|
switched to db admin
|
mongos> db.auth('testuser', 'testpwd')
|
1
|
mongos> db.getUser('testuser')
|
{
|
"_id" : "admin.testuser",
|
"user" : "testuser",
|
"db" : "admin",
|
"roles" : [
|
{
|
"role" : "clusterAdmin",
|
"db" : "admin"
|
},
|
{
|
"role" : "dbAdminAnyDatabase",
|
"db" : "admin"
|
},
|
{
|
"role" : "readWriteAnyDatabase",
|
"db" : "admin"
|
},
|
{
|
"role" : "userAdminAnyDatabase",
|
"db" : "admin"
|
}
|
]
|
}
|
mongos> db.runCommand({getCmdLineOpts: 1})
|
{
|
"ok" : 0,
|
"errmsg" : "not authorized on admin to execute command { getCmdLineOpts: 1.0 }",
|
"code" : 13
|
}
|
mongos> show dbs
|
2014-10-08T18:33:52.465-0400 listDatabases failed:{
|
"ok" : 0,
|
"errmsg" : "not authorized on admin to execute command { listDatabases: 1.0 }",
|
"code" : 13
|
} at src/mongo/shell/mongo.js:47
|
mongos>
|
This does not happen with 2.7.7. I don't believe this happens with a replica set without sharding.
Assigning to andreas.nilsson@10gen.com on suggestion from spencer