[SERVER-15341] Expand auditing guarantee to non-durable operations Created: 22/Sep/14  Updated: 06/Dec/22

Status: Backlog
Project: Core Server
Component/s: Security
Affects Version/s: 2.6.4
Fix Version/s: None

Type: Improvement Priority: Major - P3
Reporter: Ricardo Lorenzo Assignee: Backlog - Security Team
Resolution: Unresolved Votes: 0
Labels: Auditing, audit, auditing, security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
Assigned Teams:
Server Security
Participants:
Case:

 Description   

MongoDB may lose events if the server terminates before it commits the events to the audit log. The client may receive confirmation of the event before MongoDB commits to the audit log.

The behaviour only applies for operations that do not compromise the durability. No audited write events happens before the audit write has completed.

The main idea here is to enable the same behaviour for every kind of operations.


Generated at Thu Feb 08 03:37:44 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.