-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
-
Query Execution
-
Fully Compatible
-
ALL
-
v8.0, v7.3, v7.0, v6.0, v5.0
-
-
0
Queries executed via $where may do getMore which trigger an assertion in the security auth contracts that commands do not need more privileges then they declare in IDL. This occurs because the getMore is executed on the same client as the update command. The checks are both commands are merged together. The fix is to add these getMore privileges to update.