[DOCS-4702] root role does have access to system.* collections Created: 20/Jan/15  Updated: 11/Jan/17  Resolved: 18/May/16

Status: Closed
Project: Documentation
Component/s: manual
Affects Version/s: None
Fix Version/s: 01112017-cleanup

Type: Bug Priority: Major - P3
Reporter: Ramon Fernandez Marina Assignee: Unassigned
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
is related to SERVER-16944 dbAdminAnyDatabase should have full p... Closed
Participants:
Days since reply: 7 years, 39 weeks, 1 day ago

 Description   

When SERVER-16944 came in I asked spencer about the ability of the root role to access system.* collections.

The docs say that's not the case, but that's not really accurate as the root role can already access system.indexes and system.namespaces so we should probably remove this line:

root does not include any access to collections that begin with the system. prefix.

and possible amend the next paragraph:

For example, without the ability to insert data directly into the:data:system.users <admin.system.users> and system.roles collections in the admin database. root is not suitable for writing or restoring data that have these collections (e.g. with mongorestore.) To perform these kinds of restore operations, provision users with the restore role.



 Comments   
Comment by Githook User [ 18/May/16 ]

Author:

{u'username': u'kay-kim', u'name': u'kay', u'email': u'kay.kim@10gen.com'}

Message: DOCS-4702 root role and system. collections
Branch: master
https://github.com/mongodb/docs/commit/b8125702a7411c9ce73c66e955c2a5aa96230858

Comment by Githook User [ 18/May/16 ]

Author:

{u'username': u'kay-kim', u'name': u'kay', u'email': u'kay.kim@10gen.com'}

Message: DOCS-4702 root role and system. collections
Branch: v3.0
https://github.com/mongodb/docs/commit/326c7e4b8381519191574a0a48fdb506c1e466c7

Generated at Thu Feb 08 07:48:38 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.