Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-46638

Investigate RWC default implications for FLE in the shell

    • Fully Compatible
    • v5.0
    • Security 2021-05-03, Security 2021-05-17, Security 2021-05-31, Security 2021-06-14

      The EncryptedDBClientBase::getDataKeyFromDisk() and getUUIDByDataKeyAltName() functions use DBClient's findOne(), but without passing a read concern. (The ability to pass RC was recently added on SERVER-45692.) This means that these functions will use the custom default read concern, if the admin has defined one. We need to determine if it's appropriate for these reads to use a custom default RWC, or if they should pass a read concern of ReadConcernArgs::kImplicitDefault to ensure that the read consistency doesn't change in the presence of RWC defaults. We should also check if there are other places where RWC defaults may be inappropriately used by FLE code.

            Assignee:
            shreyas.kalyan@mongodb.com Shreyas Kalyan
            Reporter:
            kevin.pulo@mongodb.com Kevin Pulo
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: