Disallow writes to oplog from all builtin roles

XMLWordPrintableJSON

    • Type: Bug
    • Resolution: Won't Fix
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: Security
    • Server Security
    • ALL
    • Security 2018-10-08, Security 2018-10-22
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      A normal user who has write access to the "local" database is currently not disallowed from writing arbitrary data to the oplog. We should discuss more stringent rules about when (if ever) to allow these kinds of arbitrary oplog writes.

              Assignee:
              [DO NOT USE] Backlog - Security Team
              Reporter:
              Will Schultz
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: