[SERVER-20772] `readWrite` role should include `collMod` permission Created: 06/Oct/15 Updated: 06/Dec/22 |
|
| Status: | Open |
| Project: | Core Server |
| Component/s: | Security |
| Affects Version/s: | 3.0.6 |
| Fix Version/s: | features we're not sure of |
| Type: | Improvement | Priority: | Minor - P4 |
| Reporter: | Stennie Steneker (Inactive) | Assignee: | Backlog - Security Team |
| Resolution: | Unresolved | Votes: | 1 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||
| Assigned Teams: |
Server Security
|
||||
| Participants: | |||||
| Description |
|
The `readWrite` role includes permission to create/drop indexes and collections, but does not include `collMod` which is useful for updating TTL expiry. |