Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-25655

mongodb permission issues

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Duplicate
    • Affects Version/s: 3.0.12
    • Fix Version/s: None
    • Component/s: Admin
    • Labels:
      None
    • Operating System:
      ALL

      Description

      Hey Guys

      I have been observing some strange permissions related behaviour in mongodb.

      1. use db01
      2. create user01 with dbOwner role on db01
      3. login as user01
      4. db.testData.insert({"state": 1})
      5. use db02
      6. create user02 with dbOwner role on db02
      7. login as user02
      8. use db01
      9. show collections

      What you should see:

      • error you do not have permissions to access db01

      What you actually see:

      • user02 seems to be able to list the tables / collections on db01 without any issues

        Attachments

          Issue Links

          duplicates

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-25804 The listCollections command does not take the user's permissions into account

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              michael.qiu@wdtl.com asdf01
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: