[SERVER-17315] backup role insufficient to take snapshots of a sharded cluster Created: 18/Feb/15  Updated: 13/Dec/17  Resolved: 19/Feb/15

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 2.6.7, 3.0.0-rc8
Fix Version/s: 3.0.0-rc9, 3.1.0

Type: Bug Priority: Major - P3
Reporter: Cory Mintz Assignee: Amalia Hawkins
Resolution: Done Votes: 1
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Documented
is documented by DOCS-4843 backup role insufficient to take snap... Closed
Related
Backwards Compatibility: Fully Compatible
Operating System: ALL
Backport Completed:
Sprint: Security [00-02-20-15]
Participants:
Case:

 Description   

The balancer must be stopped (ensuring there are no chunk migrations) to be able to take a consistent snapshots across the shards of a cluster. To accomplish this, the backup role needs find, insert, and update permissions on db: config, collection: settings.



 Comments   
Comment by Githook User [ 19/Feb/15 ]

Author:

{u'username': u'hawka', u'name': u'Amalia Hawkins', u'email': u'amalia.hawkins@10gen.com'}

Message: SERVER-17315 Add permissions on config.settings to backup auth role

(cherry picked from commit 44a8c494fcb1259a00328ebf5cf29c1b7de2a075)
Branch: v3.0
https://github.com/mongodb/mongo/commit/48155657e23069536d15e45f41e734f7c1c87633

Comment by Amalia Hawkins [ 19/Feb/15 ]

Commit: https://github.com/mongodb/mongo/commit/44a8c494fcb1259a00328ebf5cf29c1b7de2a075
I made a typo on the server ticket number, sorry. :x

We should update docs page: http://docs.mongodb.org/manual/reference/built-in-roles/#backup

Comment by Eric Milkie [ 18/Feb/15 ]

The "sh" shell helpers for the balancer also need access to config.locks, in order to detect when the balancer is actually stopped.

Generated at Thu Feb 08 03:44:00 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.