listDatabases currently can produce a list of all databases the client is authorized for. It decides that a user is authorized if it possesses the find action on the database resource. However, a client may possess the find action (or any other action) on a collection resource inside of the database.

listDatabases should return all databases for which the client possesses any action on the database or on any collection within the database.