-
Type: Improvement
-
Resolution: Duplicate
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: Aggregation Framework, Security
-
None
-
Query
-
Fully Compatible
-
Query 2016-12-12
There are no automated tests for permissions checks on the collection being looked up from in an aggregation pipeline. We should add some.
- duplicates
-
SERVER-24653 $graphLookup stage does not check for permissions on "from" collection
- Closed