[DOCS-12141] Docs for SERVER-37551: Add {authorizedDatabases:bool} param to {listDatabases} command. Created: 15/Oct/18  Updated: 13/Nov/23  Resolved: 06/Dec/18

Status: Closed
Project: Documentation
Component/s: manual, Server
Affects Version/s: None
Fix Version/s: 4.1.4, 4.0.5, Server_Docs_20231030, Server_Docs_20231106, Server_Docs_20231105, Server_Docs_20231113

Type: Task Priority: Major - P3
Reporter: Kay Kim (Inactive) Assignee: Kay Kim (Inactive)
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Documented
documents SERVER-37551 Add {authorizedDatabases:bool} param ... Closed
Related
is related to DOCS-12244 Docs for SERVER-38293: Make listDatab... Closed
Participants:
Days since reply: 5 years, 7 weeks, 6 days ago
Epic Link: DOCS: 4.2 Server/Tools

 Description   

Description

Description:

This change introduces a new optional boolean argument to the

{listDatabases:1}

command called "authorizedDatabases".

The value of the argument must be either true or false if present.

If present and true, then only those databases which the user has the `find` privilege on will be returned, even if they have the `listDatabases` privilege which would otherwise grant permissions to enumate all databases.

If present and false, the all databases will be included, but ONLY if the user also has the listDatabases privilege. If they do not possess this privilege, but ask for all databases anyway (by passing false), then an Unauthorized error will be returned.

If the new param is not present, the command behaves as it currently does, returning all databases for users with the `listDatabases` privilege, and only those databases which the user has `find` privileges on for all others.

Scope of changes

  • listDatabases command
  • built-in roles + auth actions privileges
  • Although we have some scripts that use listDatabases, for now, will not call out since we use the default. Although, may, want to blurb to check privileges in those spots.

Impact to Other Docs

MVP (Work and Date)

Resources (Scope or Design Docs, Invision, etc.)



 Comments   
Comment by Githook User [ 20/Dec/18 ]

Author:

{'email': 'kay.kim@mongodb.com', 'name': 'Kay Kim'}

Message: DOCS-12141: listDatabases authorizedDatabases
Branch: v4.0
https://github.com/mongodb/docs/commit/689a28382317a8ab5445595bddcb87fbe5a793d8

Comment by Githook User [ 06/Dec/18 ]

Author:

{'name': 'Kay Kim', 'email': 'kay.kim@mongodb.com'}

Message: DOCS-12141: listDatabases authorizedDatabases
Branch: master
https://github.com/mongodb/docs/commit/dce7f0ba4d11ca99e567878ecdd87b311ad2ea2c

Generated at Thu Feb 08 08:04:29 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.