[SERVER-53498] Test all commands in commands_lib.js with replica set node Created: 23/Dec/20 Updated: 06/Dec/22 |
|
| Status: | Backlog |
| Project: | Core Server |
| Component/s: | Security |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Task | Priority: | Major - P3 |
| Reporter: | Cheahuychou Mao | Assignee: | Backlog - Security Team |
| Resolution: | Unresolved | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Assigned Teams: |
Server Security
|
| Participants: |
| Description |
|
Currently, they are only tested against standalone mongod and mongos. |
| Comments |
| Comment by Max Hirschhorn [ 23/Dec/20 ] |
|
Do replica set members enforce different authentication rules than stand-alone mongod processes? My impression was that their behavior was the same for the purposes of authorization. And that while a command may fail against a stand-alone mongod, the authorization checks would take place before command execution so {expectFail: true} can be used to ignore the ok:0 command response. commands_lib.js runs _configsvrXX commands against a stand-alone mongod despite it not being a --configsvr too. |