Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-28260

Create a killAnyCursor privilege

    XMLWordPrintableJSON

Details

    • Task
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • 3.6.3, 3.7.1
    • Querying, Security
    • None
    • Major Change
    • v3.6
    • Platforms 2017-11-13, Platforms 2017-12-04

    Description

      A ClientCursor is associated with the set of users that were authenticated when it was created.
      A killCursors should only succeed if the intersection of currently authenticated users and the set of users associated with the ClientCursor is nonempty (or the set of users associated with the ClientCursor is empty), or if the user has the killAnyCursor privilege for that collection.

      Attachments

        Issue Links

          Activity

            People

              sara.golemon@mongodb.com Sara Golemon
              tess.avitabile@mongodb.com Tess Avitabile (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: