-
Type: Engineering Test
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
-
Query Optimization
-
Fully Compatible
-
v8.0, v7.0, v6.0, v5.0
-
QO 2024-07-22, QO 2024-08-05, QO 2024-08-19, QO 2024-09-02, QO 2024-09-16, QO 2024-09-30, QO 2024-10-14
Document-source aggregation stages are registered with either REGISTER_DOCUMENT_SOURCE or REGISTER_INTERNAL_DOCUMENT_SOURCE. We should assert all these stages have proper auth check tested avoid security vulnerabilities.
An example of adding an auth check test is SERVER-90116 which added a missing stage in jstests/auth/lib/commands_lib.js .
- is related to
-
SERVER-95919 Asserts that all the aggregation stages have auth tests
- Closed