Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-79071

Add new privilege action type for non-tokenized $queryStats invocation

    XMLWordPrintableJSON

Details

    • Query Optimization
    • Fully Compatible

    Description

      We want non-tokenized invocations to demand an explicit privilege action, and so we also need to change the $queryStats stage to say that invocations without 'transformIdentifiers' are not allowed with only the queryStatsRead privilege.

      At the time of this filing it's still being discussed whether this should be part of the clusterManager role by default like the existing action

      Attachments

        Activity

          People

            naama.bareket@mongodb.com Naama Bareket
            charlie.swanson@mongodb.com Charlie Swanson
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: