Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-30398

setFeatureCompatibilityVersion shouldn't disable custom roles

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 3.5.11
    • Affects Version/s: None
    • Component/s: Internal Code
    • Labels:
      None
    • Fully Compatible
    • ALL
    • Platforms 2017-07-31

      setFeatureCompatibilityVersion issues a collMod to admin.system.roles. The AuthorizationManager receives a notification of this event, but is unable to understand what it means for the semantics of the collection. This results in the following error message:

      2017-07-27T18:18:35.908-0400 E ACCESS   [conn1] Unsupported modification to roles collection in oplog; restart this process to reenable user-defined roles; OplogOperationUnsupported: Unsupported oplog operation; Oplog entry: { op: "c", ns: "admin.$cmd", o: { collMod: "system.roles" } }
      

      After this point, privileges provided by custom roles no longer propagate to users.

            Assignee:
            sara.golemon@mongodb.com Sara Golemon
            Reporter:
            spencer.jackson@mongodb.com Spencer Jackson
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: