Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-65088

Create a privilegeless role called 'directShardOperations'

    • Type: Icon: Task Task
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 6.0.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • Labels:
    • Minor Change
    • Security 2022-04-18

      We want to create this "placeholder" role in 6.0.0 that servers no purpose so that 7.0.0 binaries can start blocking direct shard operations (rather than going through a mongos) without having to gate on FCV. Atlas and OM will assign this role to their agents in 6.0 to make the 7.0 transition seamless. In 7.0 the role will start giving users privileges to write directly to shards.

            Assignee:
            varun.ravichandran@mongodb.com Varun Ravichandran
            Reporter:
            judah.schvimer@mongodb.com Judah Schvimer
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: