[SERVER-24653] $graphLookup stage does not check for permissions on "from" collection Created: 17/Jun/16  Updated: 16/Nov/16  Resolved: 23/Jun/16

Status: Closed
Project: Core Server
Component/s: Aggregation Framework, Security
Affects Version/s: None
Fix Version/s: 3.3.9

Type: Bug Priority: Major - P3
Reporter: Charlie Swanson Assignee: Charlie Swanson
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Duplicate
is duplicated by SERVER-21699 Add tests for authorization with $loo... Closed
Backwards Compatibility: Fully Compatible
Operating System: ALL
Sprint: Query 16 (06/24/16)
Participants:

 Comments   
Comment by Githook User [ 23/Jun/16 ]

Author:

{u'username': u'cswanson310', u'name': u'Charlie Swanson', u'email': u'charlie.swanson@mongodb.com'}

Message: SERVER-24653 $graphLookup should check permissions on "from" collection.
Branch: master
https://github.com/mongodb/mongo/commit/17a143c17686a8103e26f833976c2d8fe91724a1

Generated at Thu Feb 08 04:07:02 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.