[SERVER-55108] userId field is missing in few documents under system.users collection Created: 10/Mar/21  Updated: 10/Mar/21  Resolved: 10/Mar/21

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 3.6.16
Fix Version/s: None

Type: Question Priority: Major - P3
Reporter: Mithun Raj V K Assignee: Unassigned
Resolution: Duplicate Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Backwards Compatibility: Fully Compatible
Participants:

 Description   

Hi Team,

Customer is noticing mismatch in documents field under system.users collection , ie userId field is missing for few users. We explained that this fix is added as part of SERVER-38984 introduced in 3.6.13 version, so users created before that will not have this field. And we recommended to drop and recreate the users to fix the vulnerability. But customer is not ready to do this action.

Customer is running 3.6.16 version. I searched on jira but could not find any related tickets.
 

Question

Can we update the document by inserting userid field ? will it have any impact/issue ?
In future version can we provide a mechanism to auto update this field for those users it is missing ?

 



 Comments   
Comment by Mithun Raj V K [ 10/Mar/21 ]

Duplicate of HELP-22864

Generated at Thu Feb 08 05:35:29 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.