Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-40817

Handle createIndexes on roles collection in RoleGraphUpdate

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: 3.6.12, 4.0.9
    • Fix Version/s: 4.0.10
    • Component/s: Security
    • Labels:
      None
    • Backwards Compatibility:
      Fully Compatible
    • Sprint:
      Security 2019-05-20
    • Case:

      Description

      The master branch's role graph update logic has support for the following event on admin.system.roles:

      BSON("createIndexes"
                                                    << "system.roles"
                                                    << "v"
                                                    << 2
                                                    << "name"
                                                    << "role_1_db_1"
                                                    << "key"
                                                    << BSON("role" << 1 << "db" << 1)
                                                    << "unique"
                                                    << true)
      {

      We should ensure older stable branches can handle it as well. Without support, nodes may attempt to create a default index on the roles collection and trigger the following error message:
      Unsupported modification to roles collection in oplog; restart this process to reenable user-defined roles; OplogOperationUnsupported: Unsupported oplog operation.

        Attachments

          Activity

            People

            • Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: