Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-25994

Allow applyOps to validate authorization permissions at the operation level

    XMLWordPrintableJSON

Details

    • Minor Change
    • Platforms 2016-09-19, Platforms 2016-10-10

    Description

      Currently, applyOps requires that the authenticated user has the ability to perform any operation on the system. However, applying an individual op may not require such extensive privileges. If the authenticated user has the ability to perform some operations, like inserting documents to a particular collection, they should be able to perform the same actions use applyOps.

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. SERVER-19191 "restore" role does not have applyOps permissions on servers using a keyFile

          • Major - P3 - Major loss of function.
          • Closed
          is documented by

          Task - A task that needs to be done. DOCS-9467 Docs for SERVER-25994: Allow applyOps to validate authorization permissions at the operation level

          • Major - P3 - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. SERVER-19768 Failed applyOps command does not create an oplog entry even with some successful writes

          • Critical - P2 - Crashes, loss of data, severe memory leak.
          • Closed
          related to

          Bug - A problem which impairs or prevents the functions of the product. SERVER-53674 Do not run applyOps commands in the fuzzer

          • Major - P3 - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-36263 Bypassing operation validation in applyOps should require special privilege

          • Major - P3 - Major loss of function.
          • Closed

          Activity

            People

              spencer.jackson@mongodb.com Spencer Jackson
              spencer.jackson@mongodb.com Spencer Jackson
              Votes:
              0 Vote for this issue
              Watchers:
              14 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: