[SERVER-40385] Running waitForAllIndexBuildsToFinish on admin.system.roles disables role transitivity Created: 29/Mar/19  Updated: 29/Oct/23  Resolved: 02/Apr/19

Status: Closed
Project: Core Server
Component/s: Replication, Security
Affects Version/s: None
Fix Version/s: 4.1.10

Type: Bug Priority: Major - P3
Reporter: Spencer Jackson Assignee: Spencer Jackson
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
Backwards Compatibility: Fully Compatible
Operating System: ALL
Sprint: Security 2019-04-08
Participants:
Linked BF Score: 44

 Description   

waitForAllIndexBuildsToFinish runs

        assert.commandWorked(this.getPrimary().getDB(dbName).runCommand(
            {collMod: collName, usePowerOf2Sizes: true}));

When applied to admin.system.users, the resulting Oplog entry is not recognized by the AuthorizationManager's log_op method, which disabled transitive rolegraph resolution.



 Comments   
Comment by Githook User [ 02/Apr/19 ]

Author:

{'email': 'spencer.jackson@mongodb.com', 'name': 'Spencer Jackson', 'username': 'spencerjackson'}

Message: SERVER-40385 Prevent collMod with usePowerOf2Sizes from invalidating the RoleGraph
Branch: master
https://github.com/mongodb/mongo/commit/f5f28e765740c48d3ed8715e2282365393579b3d

Generated at Thu Feb 08 04:54:49 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.