Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-32942

mongo shell: for users authorized to certain namespace, make discovery easy

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • 4.0.0-rc0
    • Shell
    • None
    • Minor Change
    • Platforms 2018-02-26, Platforms 2018-03-12, Platforms 2018-03-26, Platforms 2018-04-09, Platforms 2018-04-23, Platforms 2018-05-07, Platforms 2018-05-21

    Description

      For users that connect to an authentication-enabled database that are authorized to only certain namespaces, the mongo shell should look up the namespaces the user is authorized to (for example by using the connectionStatus command command)

      and then, if they exist, show those namespaces to the user in shell helpers like "show dbs" or "show collections".

      I suspect the fact that this is not baked into the shell's DNA today is a holdover from the fact that the shell was originally built when mongodb did not use auth by default...

      We should first investigate implementing showCollections properly in the server and backporting it all the way to 3.2. If this doesn't work, we should modify the shell helpers to appear to have the correct behavior.

      Attachments

        Issue Links

          is depended on by

          New Feature - A new feature of the product, which has yet to be developed. COMPASS-2245 As a user with limited permissions (read-only on a specific collection) I want to view which collections I have access to and specify the collection to access when providing my connection details

          • Major - P3 - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. DRIVERS-1393 Support authorizedCollections option for listCollections helpers

          • Major - P3 - Major loss of function.
          • Implementing

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-40736 Test collection name autocompletion for users without listCollections privilege

          • Major - P3 - Major loss of function.
          • Closed
          is documented by

          Task - A task that needs to be done. DOCS-11718 Docs for SERVER-32942: mongo shell: for users authorized to certain namespace, make discovery easy

          • Major - P3 - Major loss of function.
          • Closed
          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-25804 The listCollections command does not take the user's permissions into account

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. SERVER-35638 Shell auto-completion blocks when listCollection is waiting for locks

          • Major - P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. SERVER-38867 "show collections" no longer lists system.* collections

          • Major - P3 - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-36262 mongo shell: allow users to show dbs (on <4.0 versions of the server) without the listDatabases privilege

          • Major - P3 - Major loss of function.
          • Closed
          related to

          Bug - A problem which impairs or prevents the functions of the product. COMPASS-3389 Confusing behavior when connecting with user that has database-level permissions to Atlas cluster where the database does not exist

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. DRIVERS-1393 Support authorizedCollections option for listCollections helpers

          • Major - P3 - Major loss of function.
          • Implementing

          Activity

            People

              spencer.jackson@mongodb.com Spencer Jackson
              andrew.davidson@mongodb.com Andrew Davidson
              Votes:
              0 Vote for this issue
              Watchers:
              16 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: