Loading...

XML

Word

Printable

JSON

Type: Improvement
Resolution: Duplicate
Priority: Major - P3
Fix Version/s: None
Affects Version/s: None
Component/s: Aggregation Framework, Security
Labels:
None

Assigned Teams:

Query
Backwards Compatibility:
Fully Compatible
Sprint:
Query 2016-12-12
Confidence Status:
None
Work Order:
3

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name:
None
Goal Link:
None

There are no automated tests for permissions checks on the collection being looked up from in an aggregation pipeline. We should add some.

duplicates

SERVER-24653 $graphLookup stage does not check for permissions on "from" collection

Closed

Assignee:: Backlog - Query Team (Inactive)
Reporter:: Charlie Swanson
Participants:: Backlog - Query Team, Charlie Swanson
Votes:: 0 Vote for this issue
Watchers:: 3 Start watching this issue

Created:: Nov 30 2015 06:55:37 PM UTC
Updated:: Dec 06 2022 04:38:47 AM UTC
Resolved:: Nov 16 2016 10:42:48 PM UTC