[SERVER-16092] Modifications to admin.system.users and admin.system.roles collections must be serialized Created: 11/Nov/14  Updated: 23/Jan/15  Resolved: 20/Jan/15

Status: Closed
Project: Core Server
Component/s: Concurrency, Security
Affects Version/s: 2.8.0-rc0
Fix Version/s: 3.0.0-rc6

Type: Bug Priority: Major - P3
Reporter: Andy Schwerin Assignee: Mark Benvenuto
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Backwards Compatibility: Fully Compatible
Operating System: ALL
Participants:

 Description   

Writes to the admin.system.roles and maybe admin.system.users and admin.system.version collections need to be serialized, because the role graph and user cache maintenance code depends on that behavior. The actual user and role management commands are fine, because they are externally synchronized, but direct writes to the roles collection, say by mongorestore, need to be synchronized.

The easiest solution is to make all writes to the admin database require a MODE_X lock on the admin database.



 Comments   
Comment by Githook User [ 20/Jan/15 ]

Author:

{u'username': u'markbenvenuto', u'name': u'Mark Benvenuto', u'email': u'mark.benvenuto@mongodb.com'}

Message: SERVER-16092: Serialize writes to admin db for auth collections
Branch: master
https://github.com/mongodb/mongo/commit/7221fd14ea822cf380e53ec89f5848fb5295163b

Generated at Thu Feb 08 03:39:56 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.