Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-33302

Missing log redaction for a few failure paths

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 3.6.4, 3.7.3
    • Affects Version/s: 3.6.2
    • Component/s: Querying
    • None
    • Fully Compatible
    • ALL
    • v3.6
    • Query 2018-02-26

      When using authentication and log redaction, issuing a find command the query is displayed in the log file if the user is not authorized to run the command:

      Using OP_QUERY legacy find
      2018-02-13T14:19:54.531-0500 I QUERY    [conn1] assertion Unauthorized: not authorized for query on test.foo ns:test.foo query:{ _id: 123.0 }
      
      Using find command
      2018-02-13T14:20:14.811-0500 I ACCESS   [conn2] Unauthorized: not authorized on test to execute command { find: "foo", filter: { _id: 123.0 }, $db: "test" }
      

            Assignee:
            david.storch@mongodb.com David Storch
            Reporter:
            ramon.fernandez@mongodb.com Ramon Fernandez Marina
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: