Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-31810

applyOps command with UUID containing op must require internal privileges

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • 3.6.0-rc5, 3.7.1
    • Internal Code
    • Fully Compatible
    • v3.6
    • Platforms 2017-11-13, Platforms 2017-12-04

    Description

      Tools performing restores will strip UUIDs out of the oplog tokens they are applying to produce a point in time snapshot. Because there is non-user facing behavior around application of oplog tokens containing UUIDs, the server must require users applying them to possess internal privileges.

      Attachments

        Issue Links

          has to be done before

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-31864 applyOps command with UUID containing op must require granular privileges

          • Major - P3 - Major loss of function.
          • Closed
          is documented by

          Task - A task that needs to be done. DOCS-11024 applyOps command with UUID containing op must require internal privileges (SERVER-31810)

          • Major - P3 - Major loss of function.
          • Closed

          Activity

            People

              spencer.jackson@mongodb.com Spencer Jackson
              spencer.jackson@mongodb.com Spencer Jackson
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: