Details
-
Bug
-
Resolution: Won't Fix
-
Major - P3
-
None
-
3.6.17, 4.2.3, 4.0.15
-
None
-
Query
-
ALL
-
Description
There is no restriction on having an "initial source" stage (e.g. $collStats, $planCacheStats, ...) within a $lookup sub-pipeline, which means the operation may not perform a read against the 'from' collection. In such a case, the aggregation should not require the 'find' privilege on the 'from' collection.