[KAFKA-332] Config option to skip user permission validation Created: 05/Oct/22 Updated: 27/Oct/22 Resolved: 27/Oct/22 |
|
| Status: | Closed |
| Project: | Kafka Connector |
| Component/s: | Sink, Source |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | New Feature | Priority: | Major - P3 |
| Reporter: | Javier Holguera | Assignee: | Robert Walters |
| Resolution: | Won't Fix | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Description |
|
The MongoDB connector runs the following command to check if the provided user has "appropriate" permissions for what the source/sink connectors will do with the respective Mongo database. {{db.runCommand( {connectionStatus: 1, showPrivileges: true});}} CosmosDB Mongo API does not support yet the `connectionStatus` command as per this link: https://learn.microsoft.com/en-us/azure/cosmos-db/mongodb/feature-support-42 While the immediate answer would be to drop CosmosDB and use a "real" MongoDB backend, things are not always that simple. Besides, in the case of CosmosDB Mongo API, this check is unrealistic because the user does have the necessary permissions, so skipping the check would not cause any harm. I propose that there is a new configuration entry (false by default) that allows that: skipping user permissions check. Will follow up with a link to the appropriate PR, just want to raise this ticket first so I can link it in the PR.
|
| Comments |
| Comment by Robert Walters [ 27/Oct/22 ] |
|
Ignoring permission checks would degrade the user experience and not add any benefit to users of the connector when connecting to MongoDB. I suggest forking the code and implementing your code to ignore the check. |
| Comment by Javier Holguera [ 27/Oct/22 ] |
|
Any news on this? |
| Comment by Javier Holguera [ 19/Oct/22 ] |
|
Any news with this ticket? Btw this was the original conversation in the Mongo Forum: https://www.mongodb.com/community/forums/t/kafka-connect-mongo-connector-with-cosmosdb-mongo-api/182772/10 |
| Comment by Javier Holguera [ 05/Oct/22 ] |
|
Link to PR: https://github.com/mongodb/mongo-kafka/pull/120 |