Details
-
Task
-
Resolution: Fixed
-
Major - P3
-
None
-
None
-
None
-
Fully Compatible
-
Security 2021-04-05
Description
Aggregate is complex. Search the code for LiteParsedDocumentSource::requiredPrivileges.
Here is a potential list discovered during the design phase
-
|
resource: cluster
|
action_type: insert
|
-
|
resource: namespace
|
action_type: find
|
-
|
resource: any_normal
|
action_types: [ changeStream, find]
|
-
|
resouce: database
|
action_types: [ changeStream, find]
|
|
-
|
resource: exact_ns
|
action_types: [ changeStream, find]
|
|
-
|
resource: exact_ns
|
action_types: collStats
|
-
|
resource: cluster
|
action_types: inprog
|
-
|
resource: exact_ns
|
action_types: find
|
-
|
resource: exact_ns
|
action_types: indexStats
|
-
|
resource: any_normal
|
action_types: listCachedAndActiveUsers
|
-
|
resource: any_normal
|
action_types: listSessions
|
-
|
resource: exact_ns
|
action_types: find
|
-
|
resource: exact_ns
|
action_types: bypassDocumentValidation
|
-
|
resource: exact_ns
|
action_types: operationMetrics
|
-
|
resource: exact_ns
|
action_types: [insert, remove, bypassDocumentValidation]
|
-
|
resource: exact_ns
|
action_types: planCacheRead
|
-
|
resource: cluster
|
action_types: fsync
|
-
|
resource: exact_ns
|
action_types: merge
|
Attachments
Issue Links
- depends on
-
SERVER-54523 Extend access_check for complex checks and generate IDL contract
-
- Closed
-
- is depended on by
-
SERVER-54533 Add error in IDL that all commands with api_version != “” have access_check
-
- Closed
-