Make listDatabases understand collection privileges

XMLWordPrintableJSON

    • Minor Change
    • ALL
    • v4.0
    • Security 2018-12-17
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None

      listDatabases currently can produce a list of all databases the client is authorized for. It decides that a user is authorized if it possesses the find action on the database resource. However, a client may possess the find action (or any other action) on a collection resource inside of the database.

      listDatabases should return all databases for which the client possesses any action on the database or on any collection within the database.

            Assignee:
            Isabella Siu (Inactive)
            Reporter:
            Spencer Jackson
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: