Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-54964

Require valid clients for all audit events

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.9.0
    • Component/s: None
    • Labels:
      None
    • Backwards Compatibility:
      Fully Compatible
    • Sprint:
      Security 2021-03-22

      Description

      We take a client pointer to our audit hooks but allow for it to be nullptr. Audit events are related to changes in storage, networking, or other stateful systems, thus we should always have at least a client if not an opCtx. We should invariant that the client exists and fix places where it does not. (Notably, logLogout fails to acquire the current client during client decoration destruction.)

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              ben.caimano Benjamin Caimano (Inactive)
              Reporter:
              ben.caimano Benjamin Caimano (Inactive)
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: