[SERVER-43287] Prevent $merge from outputting to system collections Created: 11/Sep/19 Updated: 29/Oct/23 Resolved: 21/Oct/19 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Aggregation Framework |
| Affects Version/s: | None |
| Fix Version/s: | 4.3.1 |
| Type: | Improvement | Priority: | Major - P3 |
| Reporter: | Charlie Swanson | Assignee: | Mihai Andrei |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Attachments: |
|
||||||||||||||||||||
| Issue Links: |
|
||||||||||||||||||||
| Backwards Compatibility: | Minor Change | ||||||||||||||||||||
| Sprint: | Query 2019-10-21, Query 2019-11-04 | ||||||||||||||||||||
| Participants: | |||||||||||||||||||||
| Description |
|
$out has a check to disallow writing to system collections which I think should be added to $merge. Also to consider, I don't know of any restrictions on which database you can write to. We may wish to disallow writing to "admin", "config", and "local" as well. If we don't change anything, we need more tests at the very least. |
| Comments |
| Comment by Shane Harvey [ 25/Oct/19 ] |
|
Note that this is a minor breaking change since it's no longer possible to use $currentOp and $listLocalSessions with $out. This caused the test failure it |
| Comment by Githook User [ 21/Oct/19 ] |
|
Author: {'name': 'Mihai Andrei', 'email': 'mihai.andrei@mongodb.com'}Message: |
| Comment by Charlie Swanson [ 11/Sep/19 ] |
|
Started working on this as part of |