[SERVER-13727] The "backup" auth role should allow running the "collstats" command Created: 24/Apr/14  Updated: 11/Jul/16  Resolved: 28/Apr/14

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 2.6.0
Fix Version/s: 2.6.2, 2.7.0

Type: Bug Priority: Major - P3
Reporter: Steve Briskin (Inactive) Assignee: Amalia Hawkins
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Related
related to SERVER-14701 The "backup" auth role should allow r... Closed
Tested
Operating System: ALL
Backport Completed:
Participants:

 Description   

The backup agent needs ability to run "collstats". The current "backup" role does not grant this entitlement.



 Comments   
Comment by Githook User [ 15/May/14 ]

Author:

{u'username': u'hawka', u'name': u'Amalia Hawkins', u'email': u'amalia.hawkins@10gen.com'}

Message: SERVER-13727 add collStats permission to builtin backup role
(cherry picked from commit 24aeb8515961f9dc493addee39ee2d2c78254d90)
Branch: v2.6
https://github.com/mongodb/mongo/commit/36cd42c86d454fe78052339e7e53bdcc7b9b86a7

Comment by Githook User [ 28/Apr/14 ]

Author:

{u'username': u'hawka', u'name': u'Amalia Hawkins', u'email': u'amalia.hawkins@10gen.com'}

Message: SERVER-13727 add collStats permission to builtin backup role
Branch: master
https://github.com/mongodb/mongo/commit/24aeb8515961f9dc493addee39ee2d2c78254d90

Comment by Spencer Brody (Inactive) [ 25/Apr/14 ]

A workaround is to create a new user defined role on the admin database and grant it the existing backup role plus "collStats" on all collections in all dbs.

Generated at Thu Feb 08 03:32:41 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.