Details
-
Task
-
Status: In Progress
-
Major - P3
-
Resolution: Unresolved
-
None
-
None
-
None
-
None
-
Security
-
Security 2023-05-01, Security 2023-05-15, Security 2023-05-29, Security 2023-06-12
Description
Mongoses invoke the usersInfo command on config servers to update their caches of user privilege information. As a result, they cannot discern between the different authorization backends that may have been used to derive privileges (LDAP, local, etc.). Specifying the authorization provider in the usersInfo response will allow mongoses to make provider-specific decisions in its cache external state layer.