[SERVER-17315] backup role insufficient to take snapshots of a sharded cluster Created: 18/Feb/15 Updated: 13/Dec/17 Resolved: 19/Feb/15 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Security |
| Affects Version/s: | 2.6.7, 3.0.0-rc8 |
| Fix Version/s: | 3.0.0-rc9, 3.1.0 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Cory Mintz | Assignee: | Amalia Hawkins |
| Resolution: | Done | Votes: | 1 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||
| Backwards Compatibility: | Fully Compatible | ||||||||||||||||
| Operating System: | ALL | ||||||||||||||||
| Backport Completed: | |||||||||||||||||
| Sprint: | Security [00-02-20-15] | ||||||||||||||||
| Participants: | |||||||||||||||||
| Case: | (copied to CRM) | ||||||||||||||||
| Description |
|
The balancer must be stopped (ensuring there are no chunk migrations) to be able to take a consistent snapshots across the shards of a cluster. To accomplish this, the backup role needs find, insert, and update permissions on db: config, collection: settings. |
| Comments |
| Comment by Githook User [ 19/Feb/15 ] |
|
Author: {u'username': u'hawka', u'name': u'Amalia Hawkins', u'email': u'amalia.hawkins@10gen.com'}Message: (cherry picked from commit 44a8c494fcb1259a00328ebf5cf29c1b7de2a075) |
| Comment by Amalia Hawkins [ 19/Feb/15 ] |
|
Commit: https://github.com/mongodb/mongo/commit/44a8c494fcb1259a00328ebf5cf29c1b7de2a075 We should update docs page: http://docs.mongodb.org/manual/reference/built-in-roles/#backup |
| Comment by Eric Milkie [ 18/Feb/15 ] |
|
The "sh" shell helpers for the balancer also need access to config.locks, in order to detect when the balancer is actually stopped. |