[SERVER-3837] BuildInfo shouldn't require auth Created: 13/Sep/11 Updated: 11/Jul/16 Resolved: 14/Nov/11 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Security |
| Affects Version/s: | 2.0.0 |
| Fix Version/s: | 2.0.2, 2.1.0 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Mathias Stearn | Assignee: | Eliot Horowitz (Inactive) |
| Resolution: | Done | Votes: | 1 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||
| Operating System: | ALL | ||||||||
| Participants: | |||||||||
| Comments |
| Comment by auto [ 14/Nov/11 ] |
|
Author: {u'login': u'erh', u'name': u'Eliot Horowitz', u'email': u'eliot@10gen.com'}Message: make buildInfo not require auth again (back to 1.8 behavior) |
| Comment by auto [ 14/Nov/11 ] |
|
Author: {u'login': u'erh', u'name': u'Eliot Horowitz', u'email': u'eliot@10gen.com'}Message: make buildInfo not require auth again (back to 1.8 behavior) |
| Comment by Jason McCay [ 09/Nov/11 ] |
|
Thank you Eliot ... I am really appreciative of your willingness to open this back up. Will you update this when we can pull from a nightly? Jason |
| Comment by Eliot Horowitz (Inactive) [ 08/Nov/11 ] |
|
going to revert for now - we'll have to re-think some of these later |
| Comment by Jason McCay [ 07/Nov/11 ] |
|
This has proven to be an issue for us with the Mongoid driver. We use authentication for our databases, but do not want all our users to be admins on the database (for various reasons) and since Mongoid requires buildinfo (and is a very popular driver in the Ruby community), it means that moving from 1.8.x to 2.0.x has been breaking a lot of applications. Can this please be reconsidered? Why the change in this from 1.8 to 2.0? Jason |
| Comment by Robert Stam [ 14/Sep/11 ] |
|
The change to require auth for buildInfo broke the C# driver, which is using buildInfo at connect time to determine the version of the server it is connecting to. On a related note, it is now no longer possible to call buildInfo without admin credentials. Seems totally unnecessary to require admin credentials just to find out what version of the server you are connected to. I think buildInfo should NOT require auth and that this bug should be re-opened. |