Details
-
Improvement
-
Resolution: Duplicate
-
Major - P3
-
None
-
2.4.0-rc0
-
None
-
MongoDB 2.4.0-rc0
Description
At present, MongoDB does not revoke privileges for connections authenticated as deleted users.
There should be some form of "revocation and expiration of connection privileges" for a connected user if that same is deleted whilst currently logged in.
Attachments
Issue Links
- duplicates
-
SERVER-6620 Auth credentials should be invalidated when user is removed
-
- Closed
-