Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-69348

Commands must declare empty auth checks to be universally callable

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • 6.0.0, 4.4.16, 5.0.11
    • 6.1.1, 4.4.18, 4.2.24, 5.0.14, 6.0.3, 6.2.0-rc0
    • None
    • None
    • Major Change
    • ALL
    • v6.1, v6.0, v5.0, v4.4, v4.2
    • Security 2022-09-05, Security 2022-09-19

    Description

      A command can declare an auth check by overriding any of the following:

      • checkAuthForOperation
      • checkAuthForCommand
      • addRequiredPrivileges
      • checkAuthorization

      To be callable, commands must define one of these methods.

      Attachments

        Issue Links

          is depended on by

          Investigation - COMPASS-6128 Investigate changes in SERVER-69348: Commands must declare empty auth checks to be universally callable

          • Major - P3 - Major loss of function.
          • Closed
          is documented by

          Task - A task that needs to be done. DOCS-15630 Investigate changes in SERVER-69348: Commands must declare empty auth checks to be universally callable

          • Major - P3 - Major loss of function.
          • Closed
          related to

          Task - A task that needs to be done. SERVER-64001 Create a fuzzer with auth enabled

          • Major - P3 - Major loss of function.
          • Backlog

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-69737 Replace fassert 16940 with tassert

          • Major - P3 - Major loss of function.
          • Closed

          Activity

            People

              spencer.jackson@mongodb.com Spencer Jackson
              spencer.jackson@mongodb.com Spencer Jackson
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: