Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-6620

Auth credentials should be invalidated when user is removed

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Critical - P2
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.5.3
    • Component/s: Security
    • Labels:
      None
    • Environment:
      all

      Description

      When dropping a database, any users with privilege documents in that database's system.users collection should have those privileges revoked.

      Same is true for removing a user any other way.

        Attachments

          Issue Links

          depends on

          New Feature - A new feature of the product, which has yet to be developed. SERVER-8580 User defined roles

          • Major - P3 - Major loss of function.
          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. SERVER-2079 Authenticated Connections do not get terminated when dropDatabase() command is issued.

          • Major - P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. SERVER-13148 Authentication still holds after user removed

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-8591 Revoke privileges for connections authenticated as deleted users

          • Major - P3 - Major loss of function.
          • Closed
          related to

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-5582 Reset authentication info on active connections for user changes (password, level)

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

            Activity

              People

              Assignee:
              spencer Spencer Brody (Inactive)
              Reporter:
              syre xie zhenye
              Participants:
              Votes:
              1 Vote for this issue
              Watchers:
              8 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: