-
Type: Improvement
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
-
Fully Compatible
-
Security 2023-06-26
Currently, the `ResourcePattern::forAnyNormalResource()` API provides a default argument value of `boost::none` for its tenantId parameter. This must be removed as a default and all callsites must be updated to provide an appropriate tenantId based on their local context. This will usually come from a NamespaceString or DatabaseName being active examined.
For example, here: the privilege check is relative to the `dbname` extracted from the `request` object, so we'd change the call to: `ResourcePattern::forAnyNormalResource(dbname.tenantId())`.
- is depended on by
-
SERVER-76195 Remove non-tenant aware APIs from ResourcePattern
- Closed
- related to
-
SERVER-78267 Complete TODO listed in SERVER-77940
- Closed