Details
-
Task
-
Resolution: Done
-
Major - P3
-
None
-
None
-
None
Description
MapReduce should require permission for the createCollection action if the output collection specified doesn't currently exist. This requires having a way to check for the existence of a collection that will work in mongos or mongod.
It's acceptable that it doesn't currently require this privilege because there is currently you can't have insert permission (which is also required by MR when outputting to a collection) without also having createCollection permission (since they're both granted by the readWrite role). This will need to be fixed before we allow user-defined roles.
Attachments
Issue Links
- is duplicated by
-
SERVER-10290 Add createCollection to map reduce's required privileges when necessary
-
- Closed
-