Omit sensitive information for QE currentOp operations

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Fixed
    • Priority: Major - P3
    • 7.0.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • None
    • Fully Compatible
    • Security 2023-04-03, Security 2023-04-17
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      • Omit the information about the current operation from the currentOp command and $currentOp aggregation stage
      • The command will report information about which client is connected. This means fields below “command” will not be reported.  Command will be redacted such that only the first element, $comment and $db exist. If the command is a getMore, the collection field will not be omitted since it is critical for BI connector to kill connections. Details in appendix below.
      • On MongoD & MongoS, information will be omitted for QE operations and QE state collections.

      If OpDebug::shouldOmitDiagnosticInformation, then CurOp::reportCurrentOpForClient should filter the information as described above.

              Assignee:
              Mark Benvenuto
              Reporter:
              Mark Benvenuto
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: