Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-7891

Add createCollection ActionType to the required privileges needed to run MapReduce when necessary

    XMLWordPrintableJSON

Details

    • Icon: Task Task
    • Resolution: Done
    • Icon: Major - P3 Major - P3
    • None
    • None
    • Security
    • None

    Description

      MapReduce should require permission for the createCollection action if the output collection specified doesn't currently exist. This requires having a way to check for the existence of a collection that will work in mongos or mongod.

      It's acceptable that it doesn't currently require this privilege because there is currently you can't have insert permission (which is also required by MR when outputting to a collection) without also having createCollection permission (since they're both granted by the readWrite role). This will need to be fixed before we allow user-defined roles.

      Attachments

        Activity

          People

            schwerin@mongodb.com Andy Schwerin
            spencer@mongodb.com Spencer Brody (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: