Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-8935

Provide a mechanism for mongos to tell shard mongods which user every action is being performed on behalf of

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Security, Sharding
    • Sprint:
      Security 2018-10-08

      Description

      Every connection from mongos to mongod is authenticated using the internal __system user. This means that the mongods have no idea what user was authenticated to the connection to the mongos that actually initiated the request they are performing work to respond to. Perhaps a field in the wire protocol could be used for each request to tell the shard what user initiated this request? This would allow shard mongods to use that information in things like logging, profiling, auditing, etc.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                3 Vote for this issue
                Watchers:
                10 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: