Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-8935

Provide a mechanism for mongos to tell shard mongods which user every action is being performed on behalf of

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major - P3
    • Resolution: Duplicate
    • None
    • None
    • Security, Sharding
    • Security 2018-10-08

    Description

      Every connection from mongos to mongod is authenticated using the internal __system user. This means that the mongods have no idea what user was authenticated to the connection to the mongos that actually initiated the request they are performing work to respond to. Perhaps a field in the wire protocol could be used for each request to tell the shard what user initiated this request? This would allow shard mongods to use that information in things like logging, profiling, auditing, etc.

      Attachments

        Issue Links

          Activity

            People

              jonathan.reams@mongodb.com Jonathan Reams
              spencer@mongodb.com Spencer Brody (Inactive)
              Votes:
              2 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: