[SERVER-40216] [FLE] mongocryptd error for all agg metadata sources, e.g. $currentOp Created: 19/Mar/19  Updated: 27/Oct/23  Resolved: 18/Apr/19

Status: Closed
Project: Core Server
Component/s: Querying
Affects Version/s: None
Fix Version/s: None

Type: Task Priority: Major - P3
Reporter: David Storch Assignee: Nicholas Zolnierz
Resolution: Gone away Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Sprint: Query 2019-04-22
Participants:

 Description   

Suppose that a user runs a query against the encrypted field ssn. The user then wants to retrieve data about that query as it executes by running the following $currentOp pipeline:

db.aggregate([{$currentOp: {}}, {$match: {"filter.ssn": "123-45-6789"}}]);

Mongocryptd will be unable to detect that the query value should be encrypted before being sent to the server because it won't have the relevant schema information. Therefore, we will have to make mongocryptd return an error whenever it encounters a $currentOp metadata source.

To be safe, we may wish to error on all metadata sources, not just $currentOp. Another that comes to mind as dangerous is $planCacheStats.


Generated at Thu Feb 08 04:54:22 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.