Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-33302

Missing log redaction for a few failure paths

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • 3.6.2
    • 3.6.4, 3.7.3
    • Querying
    • None
    • Fully Compatible
    • ALL
    • v3.6
    • Query 2018-02-26

    Description

      When using authentication and log redaction, issuing a find command the query is displayed in the log file if the user is not authorized to run the command:

      Using OP_QUERY legacy find

      2018-02-13T14:19:54.531-0500 I QUERY    [conn1] assertion Unauthorized: not authorized for query on test.foo ns:test.foo query:{ _id: 123.0 }
      

      Using find command

      2018-02-13T14:20:14.811-0500 I ACCESS   [conn2] Unauthorized: not authorized on test to execute command { find: "foo", filter: { _id: 123.0 }, $db: "test" }
      

      Attachments

        Issue Links

          Activity

            People

              david.storch@mongodb.com David Storch
              ramon.fernandez@mongodb.com Ramon Fernandez Marina
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: