Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-36262

mongo shell: allow users to show dbs (on <4.0 versions of the server) without the listDatabases privilege

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.0.5, 4.1.5
    • Component/s: Shell
    • Labels:
      None
    • Backwards Compatibility:
      Minor Change
    • Backport Requested:
      v4.0
    • Sprint:
      Security 2018-10-22

      Description

      Related to SERVER-32942

      That ticket changed the behavior of show collections to : If the shell obtains an Unauthorized error, which it would if it ran the listCollections command against an older version of the server which didn't respect authorizedCollections, it will attempt to parse out the set of collections it has been granted privileges on from the output of connectionStatus.

      The same pattern should be applied to show dbs (listDatabases)

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              sara.golemon Sara Golemon
              Reporter:
              alyson.cabral Alyson Cabral (Inactive)
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: