Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-37735

[3.6] Ensure the full logical session id is included in commands sent by the ShardingTaskExecutor

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 3.6.9
    • Affects Version/s: 3.6.8
    • Component/s: Sharding
    • Labels:
    • Fully Compatible
    • ALL
    • Sharding 2018-11-05

      Some commands (including listCollections and listIndexes) forward the logical session id sent by the client. The client's logical session id will not include the information for the logged in user – the user information is collected from the operationContext on a mongos/mongod. If a command forwards the logical session id to a mongod without attaching the user information, the mongod will infer the system user instead of the logged in user.

      This ticket will backport a section of SERVER-35323. With this section, the ShardingTaskExecutor will verify that the user information is included in any commands sent with a logical session id. The ShardingTaskExecutor will emplace the user information onto the command object if needed.

            blake.oler@mongodb.com Blake Oler
            blake.oler@mongodb.com Blake Oler
            0 Vote for this issue
            4 Start watching this issue