Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-8935

Provide a mechanism for mongos to tell shard mongods which user every action is being performed on behalf of

    • Security 2018-10-08

      Every connection from mongos to mongod is authenticated using the internal __system user. This means that the mongods have no idea what user was authenticated to the connection to the mongos that actually initiated the request they are performing work to respond to. Perhaps a field in the wire protocol could be used for each request to tell the shard what user initiated this request? This would allow shard mongods to use that information in things like logging, profiling, auditing, etc.

            Assignee:
            jonathan.reams@mongodb.com Jonathan Reams
            Reporter:
            spencer@mongodb.com Spencer Brody (Inactive)
            Votes:
            2 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:
              Resolved: