[SERVER-22237] Built-in role that allows full control over data, but not security or topology Created: 20/Jan/16  Updated: 22/Nov/16  Resolved: 03/Feb/16

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: None
Fix Version/s: 3.2.4, 3.3.2

Type: Task Priority: Major - P3
Reporter: Cailin Nelson Assignee: Andreas Nilsson
Resolution: Done Votes: 0
Labels: code-and-test
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Backwards Compatibility: Fully Compatible
Backport Completed:
Sprint: Security F (01/29/16), Security 10 (02/19/16)
Participants:
Linked BF Score: 0

 Description   

This is a request for a new built-in role that includes the following:

  • Ability to read and write data to any database (excluding ability to directly modify system.users, system.roles). i.e. readWriteAnyDatabase
  • Ability to enable sharding on a database and ability to shard collections.

... but excludes the following:

  • Ability to create, edit, delete users
  • Ability to add/remove shard
  • Ability to modify the replica set configuration (including add/remove member, change priorities, etc.)


 Comments   
Comment by Githook User [ 18/Feb/16 ]

Author:

{u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@mongodb.com'}

Message: SERVER-22237 Fix unit test role_graph_test

(cherry picked from commit 2716b00ab844eaddaeb54ee6c235b40e1646cd19)
Branch: v3.2
https://github.com/mongodb/mongo/commit/b603f281e01f1d6dfd66a97b83d90654c28351d8

Comment by Githook User [ 17/Feb/16 ]

Author:

{u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@mongodb.com'}

Message: SERVER-22237 Add enableSharding role for CloudManager

(cherry picked from commit ccd6e73ab9d9cb544ff8cf6d59aa986b2ed528dd)
Branch: v3.2
https://github.com/mongodb/mongo/commit/0edae5e1165323c04a810a9fb3527353b8c8e8d2

Comment by Githook User [ 04/Feb/16 ]

Author:

{u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@mongodb.com'}

Message: SERVER-22237 Fix unit test role_graph_test
Branch: master
https://github.com/mongodb/mongo/commit/2716b00ab844eaddaeb54ee6c235b40e1646cd19

Comment by Githook User [ 03/Feb/16 ]

Author:

{u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@mongodb.com'}

Message: SERVER-22237 Add enableSharding role for CloudManager
Branch: master
https://github.com/mongodb/mongo/commit/ccd6e73ab9d9cb544ff8cf6d59aa986b2ed528dd

Generated at Thu Feb 08 03:59:48 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.