[SERVER-36080] Write auth tests exercising bypassDocumentValidation Created: 11/Jul/18  Updated: 06/Dec/22

Status: Backlog
Project: Core Server
Component/s: Security
Affects Version/s: None
Fix Version/s: None

Type: Task Priority: Major - P3
Reporter: Kyle Suarez Assignee: Backlog - Query Optimization
Resolution: Unresolved Votes: 0
Labels: former-quick-wins, neweng
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
is related to SERVER-36081 Write auth tests for $out and bypassD... Closed
Assigned Teams:
Query Optimization
Participants:

 Description   

According to the documentation, the following commands accept the bypassDocumentValidation option:

  • aggregate
  • applyOps
  • cloneCollection on the destination collection
  • clone on the destination
  • copydb on the destination
  • findAndModify
  • insert
  • mapReduce
  • update

However, there are no tests in the commands lib that exercise the logic that enforces the bypassDocumentValidation authz action on the namespace being written to. We should address the coverage gap!



 Comments   
Comment by Kyle Suarez [ 11/Jul/18 ]

Tests for the aggregate command should be covered under SERVER-36081.

Generated at Thu Feb 08 04:41:58 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.