Details
-
Bug
-
Resolution: Duplicate
-
Major - P3
-
None
-
3.0.12
-
None
-
ALL
Description
Hey Guys
I have been observing some strange permissions related behaviour in mongodb.
- use db01
- create user01 with dbOwner role on db01
- login as user01
- db.testData.insert({"state": 1})
- use db02
- create user02 with dbOwner role on db02
- login as user02
- use db01
- show collections
What you should see:
- error you do not have permissions to access db01
What you actually see:
- user02 seems to be able to list the tables / collections on db01 without any issues
Attachments
Issue Links
- duplicates
-
SERVER-25804 The listCollections command does not take the user's permissions into account
-
- Closed
-