-
Type: Task
-
Resolution: Duplicate
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: Replication, Security
-
Replication
AuthorizationManager::logOp() is registered on all commands in OpObserver, but only drop, dropDatabase and renameCollection are interesting to RoleGraph.
The code also treats createIndexes on roles collection as an unsupported operation. We should remove these unnecessary AuthorizationManager::logOp() calls.
if ((cmdName == "collMod" || cmdName == "emptycapped" || cmdName == "createIndexes") && cmdObj.firstElement().str() != rolesCollectionNamespace.coll()) { // We don't care about these if they're not on the roles collection. return Status::OK(); } ... // No other commands expected. Warn. return Status(ErrorCodes::OplogOperationUnsupported, "Unsupported oplog operation");
- is duplicated by
-
SERVER-38556 Decide what to do with transaction related commands in handleOplogCommand
- Closed
- is related to
-
SERVER-38556 Decide what to do with transaction related commands in handleOplogCommand
- Closed
-
SERVER-38557 Make auth passthrough suites use users with custom roles
- Closed