[SERVER-33749] Configurable Idle Connection Timeout Per User/Role for Interactive Sessions Created: 08/Mar/18  Updated: 29/Oct/23  Resolved: 09/Jul/19

Status: Closed
Project: Core Server
Component/s: Admin, Networking, Security, Shell
Affects Version/s: 3.7.3
Fix Version/s: 4.3.1

Type: New Feature Priority: Major - P3
Reporter: Matt Lord (Inactive) Assignee: Roxane Fruytier (Inactive)
Resolution: Fixed Votes: 0
Labels: ml-retriage
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Duplicate
duplicates SERVER-12418 Add support for session timeouts Closed
Related
related to SERVER-15072 Limit resource usage for certain users Closed
Backwards Compatibility: Fully Compatible
Sprint: Security 2019-02-11, Security 2019-02-25, Security 2019-03-11, Security 2019-03-25, Security 2019-07-01, Security 2019-07-15
Participants:
Case:

 Description   

The use case is:

  1. Specifically about security and NOT resource utilization
  2. Specifically about interactive client connections (not sessions or transactions): a human being using mongo shell

This feature would also require a new field with a Role: interactiveIdleConnectionTimeout: <seconds>

User Story:
As a DBA, I need to prevent users from (accidentally) leaving authenticated shells connected to my critical databases open on their desktop/laptop. This is related to global security requirements at my company, which apply to all software we use.



 Comments   
Comment by Githook User [ 09/Jul/19 ]

Author:

{'name': 'Roxane', 'email': 'roxane.fruytier@10gen.com'}

Message: SERVER-33749 Add idleSessionTimeout flag
Branch: master
https://github.com/mongodb/mongo/commit/9ad917886db091a5b7fde2434eea9095c7145986

Generated at Thu Feb 08 04:34:28 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.