Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-74962

Omit sensitive information for QE currentOp operations

    • Type: Icon: Task Task
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 7.0.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None
    • Fully Compatible
    • Security 2023-04-03, Security 2023-04-17

      • Omit the information about the current operation from the currentOp command and $currentOp aggregation stage
      • The command will report information about which client is connected. This means fields below “command” will not be reported.  Command will be redacted such that only the first element, $comment and $db exist. If the command is a getMore, the collection field will not be omitted since it is critical for BI connector to kill connections. Details in appendix below.
      • On MongoD & MongoS, information will be omitted for QE operations and QE state collections.

      If OpDebug::shouldOmitDiagnosticInformation, then CurOp::reportCurrentOpForClient should filter the information as described above.

            Assignee:
            mark.benvenuto@mongodb.com Mark Benvenuto
            Reporter:
            mark.benvenuto@mongodb.com Mark Benvenuto
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: