Details
Description
listDatabases currently can produce a list of all databases the client is authorized for. It decides that a user is authorized if it possesses the find action on the database resource. However, a client may possess the find action (or any other action) on a collection resource inside of the database.
listDatabases should return all databases for which the client possesses any action on the database or on any collection within the database.
Attachments
Issue Links
- is documented by
-
DOCS-12244 Docs for SERVER-38293: Make listDatabases understand collection privileges
-
- Closed
-