[SERVER-25738] Views authorization does not work on sharded create and collMod Created: 22/Aug/16  Updated: 02/Sep/16  Resolved: 25/Aug/16

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 3.3.11
Fix Version/s: 3.3.12

Type: Bug Priority: Major - P3
Reporter: Kyle Suarez Assignee: Kyle Suarez
Resolution: Done Votes: 0
Labels: read-only-views
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Backwards Compatibility: Fully Compatible
Operating System: ALL
Sprint: Integration 2016-08-29
Participants:

 Description   

In SERVER-24724, we implemented special-case authorization checks for create and collMod, but that did not include the mongos versions of the commands. These commands also require a special check.



 Comments   
Comment by Githook User [ 25/Aug/16 ]

Author:

{u'username': u'ksuarz', u'name': u'Kyle Suarez', u'email': u'kyle.suarez@mongodb.com'}

Message: SERVER-25738 authz for views for sharded create/collMod

Merges authz checks for create, collMod and aggregate into AuthorizationSession.
Branch: master
https://github.com/mongodb/mongo/commit/15050f49369d8972ae87444df760e78996309fdc

Generated at Thu Feb 08 04:10:04 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.