[SERVER-7122] Assign commands to system roles Created: 24/Sep/12  Updated: 02/Aug/18  Resolved: 20/Dec/12

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: 2.3.2

Type: Task Priority: Major - P3
Reporter: Eric Milkie Assignee: Spencer Brody (Inactive)
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
is depended on by SERVER-3198 Ability to restrict operations by role Closed
is depended on by SERVER-3199 Restrict user creation to admin only Closed
Related
related to SERVER-8283 Merge serverAdmin role into clusterAdmin Closed
is related to SERVER-8372 Insert only or write once access to a... Closed
Participants:

 Comments   
Comment by auto [ 12/Feb/13 ]

Author:

{u'date': u'2013-02-11T23:19:26Z', u'name': u'Spencer T Brody', u'email': u'spencer@10gen.com'}

Message: SERVER-7122 Make applyOps require all privileges to run, as it can be used to do anything
Branch: master
https://github.com/mongodb/mongo/commit/f101751415d9cf815f2205ee290eb6e803d10462

Comment by auto [ 22/Jan/13 ]

Author:

{u'date': u'2013-01-22T22:57:25Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 SERVER-8283 Merge serverAdmin role into clusterAdmin
Branch: master
https://github.com/mongodb/mongo/commit/4c8fe4f520c872cb6bc5cefd3b0ab10cd9fc1b43

Comment by auto [ 22/Jan/13 ]

Author:

{u'date': u'2013-01-22T18:57:48Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Change replica set commands to be part of clusterAdmin, not serverAdmin role
Branch: master
https://github.com/mongodb/mongo/commit/322b1a69625b14af4dac4f120cc70cd4d86f00f8

Comment by auto [ 22/Jan/13 ]

Author:

{u'date': u'2013-01-22T18:32:29Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Grant cloneCollectionLocalSource (used by renameCollection) to dbAdmin role
Branch: master
https://github.com/mongodb/mongo/commit/3f9d606e7573d28bd8edc6e417075f1ecd774b90

Comment by auto [ 22/Jan/13 ]

Author:

{u'date': u'2013-01-22T18:20:29Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Grant killCursors to serverAdmin role
Branch: master
https://github.com/mongodb/mongo/commit/f631e83b119bd0ade11cc452486dae5eacc5650f

Comment by auto [ 24/Dec/12 ]

Author:

{u'date': u'2012-12-24T00:03:22Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7572 SERVER-7122 Remove oldRead and oldWrite ActionTypes
Branch: master
https://github.com/mongodb/mongo/commit/ae5ced20b3fd0bfbcaae16d288ffd3c928677a6f

Comment by auto [ 21/Dec/12 ]

Author:

{u'date': u'2012-12-21T01:16:06Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7572 SERVER-7122 Add ensureIndex and dropIndexes to dbAdmin role
Branch: master
https://github.com/mongodb/mongo/commit/0b48bffd8417f87201ab44f2c7b00cf5f77001e4

Comment by auto [ 21/Dec/12 ]

Author:

{u'date': u'2012-12-20T21:54:21Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Fix auth checking for renameCollection command
Branch: master
https://github.com/mongodb/mongo/commit/81da4ab776af02af57727907e6d696afbda03682

Comment by auto [ 20/Dec/12 ]

Author:

{u'date': u'2012-12-20T18:51:27Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Remove default implementation of addRequiredPrivileges
Branch: master
https://github.com/mongodb/mongo/commit/fb16940fbade2e661548a43e19f9345daa41d96c

Comment by auto [ 20/Dec/12 ]

Author:

{u'date': u'2012-12-20T18:49:37Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Add required privileges to experimental indexStats and storageDetails commands
Branch: master
https://github.com/mongodb/mongo/commit/aa8069ec1a003b98f14396b2b0dc91194e867647

Comment by auto [ 19/Dec/12 ]

Author:

{u'date': u'2012-12-19T22:26:00Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to renameCollection command
Branch: master
https://github.com/mongodb/mongo/commit/58c18a5eb7bd05e50adac43a39f24f625f41cd43

Comment by auto [ 19/Dec/12 ]

Author:

{u'date': u'2012-12-19T17:18:36Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Fix tests now that $eval requires full admin access
Branch: master
https://github.com/mongodb/mongo/commit/7f065fe11da13ea6cd51f4b86efd5369fecfaaba

Comment by auto [ 19/Dec/12 ]

Author:

{u'date': u'2012-12-18T21:49:36Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to $eval command
Branch: master
https://github.com/mongodb/mongo/commit/ae77309276e82f16904302880dbdc99c9af48ad0

Comment by auto [ 14/Dec/12 ]

Author:

{u'date': u'2012-12-11T00:11:19Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Put failPoint command behind --enableTestCommands flag instead of --enableFaultInjection flag
Branch: master
https://github.com/mongodb/mongo/commit/12bab3dae57f9ba716f3bdcc059518d50dd80004

Comment by auto [ 13/Dec/12 ]

Author:

{u'date': u'2012-12-13T18:44:55Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Grant applyOps and dbHash privileges to proper roles
Branch: master
https://github.com/mongodb/mongo/commit/ecf149370b9929e6aaabfc57044183a65fb18d08

Comment by auto [ 12/Dec/12 ]

Author:

{u'date': u'2012-12-11T00:51:31Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Make DistLock test commands only work when testing commands are enabled
Branch: master
https://github.com/mongodb/mongo/commit/c99e8acd6edc9d5c60324227c6a1a6e9476a45e0

Comment by auto [ 12/Dec/12 ]

Author:

{u'date': u'2012-12-11T00:43:39Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Add required privileges to a few more commands
Branch: master
https://github.com/mongodb/mongo/commit/7c596608203b898a1ca1c75da1fbe19afcaee640

Comment by auto [ 11/Dec/12 ]

Author:

{u'date': u'2012-12-11T17:42:05Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Add required privileges to more commands
Branch: master
https://github.com/mongodb/mongo/commit/7aff4a70be26ba72eb4b4ba855eac25d4a8e72d9

Comment by auto [ 11/Dec/12 ]

Author:

{u'date': u'2012-12-11T18:31:47Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Make copydb not work with auth on mongos
Branch: master
https://github.com/mongodb/mongo/commit/79782656749bd25cb4df50bfbb3df46e22236c24

Comment by auto [ 10/Dec/12 ]

Author:

{u'date': u'2012-12-10T19:00:45Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign proper ActionType to replSetMaintenance command
Branch: master
https://github.com/mongodb/mongo/commit/e61a8e6d061b5830870ffa0062b97dc9f2db1535

Comment by auto [ 10/Dec/12 ]

Author:

{u'date': u'2012-12-10T18:29:16Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7881 SERVER-7572 SERVER-7122 Preserve backwards compatibility with old-style users for some commands
Branch: master
https://github.com/mongodb/mongo/commit/ace61a12c09b18f820067f0d451e20fe985dd0fa

Comment by auto [ 07/Dec/12 ]

Author:

{u'date': u'2012-12-06T00:26:14Z', u'name': u'Spencer T Brody', u'email': u'spencer@10gen.com'}

Message: SERVER-7122 Add required privileges to internal commands
Branch: master
https://github.com/mongodb/mongo/commit/7fee7c0eaa3680efea0ae691f5025c96ade0eae6

Comment by auto [ 05/Dec/12 ]

Author:

{u'date': u'2012-12-04T23:11:25Z', u'name': u'Spencer T Brody', u'email': u'spencer@10gen.com'}

Message: SERVER-7122 Add setParameter option to enable/disable testing commands
Branch: master
https://github.com/mongodb/mongo/commit/fe0d238b0ac31f4b2294bda827cc913d59d6de57

Comment by auto [ 05/Dec/12 ]

Author:

{u'date': u'2012-12-04T23:52:23Z', u'name': u'Spencer T Brody', u'email': u'spencer@10gen.com'}

Message: SERVER-7122 Make cloning commands not work with auth is enabled
Branch: master
https://github.com/mongodb/mongo/commit/ef198e0c58f709760c01fb0d44e01de9e67e788c

Comment by auto [ 05/Dec/12 ]

Author:

{u'date': u'2012-12-05T00:03:30Z', u'name': u'Spencer T Brody', u'email': u'spencer@10gen.com'}

Message: SERVER-7122 Setup ActionSet for internal-only actions
Branch: master
https://github.com/mongodb/mongo/commit/370a013b1dc76f21e77cd3094372bf38dae963f7

Comment by auto [ 29/Nov/12 ]

Author:

{u'date': u'2012-11-15T03:49:14Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: Add required privileges to MapReduce command SERVER-7122
Branch: master
https://github.com/mongodb/mongo/commit/871b266fe1f35e06cc6d3bdbadbc64db52591351

Comment by auto [ 29/Nov/12 ]

Author:

{u'date': u'2012-11-15T03:17:22Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: Move MapReduce option parsing somewhere it can be accessed by mongos and mongod SERVER-7122
Branch: master
https://github.com/mongodb/mongo/commit/965ad9961052a7dab133ca86e65c0aa210b3a71e

Comment by auto [ 29/Nov/12 ]

Author:

{u'date': u'2012-11-15T01:56:23Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to findAndModify command
Branch: master
https://github.com/mongodb/mongo/commit/e013f359da0fe8573f2b33f007fc5bdb2529d458

Comment by auto [ 29/Nov/12 ]

Author:

{u'date': u'2012-11-29T02:12:54Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: Buildbot - fix MapReduce by making sure finalNamespace gets set SERVER-7122
Branch: master
https://github.com/mongodb/mongo/commit/e4ee5568d96dc08115b88c1d91fbdc07fadd3bf0

Comment by auto [ 28/Nov/12 ]

Author:

{u'date': u'2012-11-15T02:45:11Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: Refactor MapReduce option parsing to make it easier to specifiy required privileges SERVER-7122
Branch: master
https://github.com/mongodb/mongo/commit/71fe3821d72371d7e047525b40ff6ac48fb14cf1

Comment by auto [ 28/Nov/12 ]

Author:

{u'date': u'2012-11-15T00:13:18Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to some more random commands
Branch: master
https://github.com/mongodb/mongo/commit/2c5becd95d63262f55fc1e789615d7636594c983

Comment by auto [ 28/Nov/12 ]

Author:

{u'date': u'2012-11-14T23:55:04Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to some random commands
Branch: master
https://github.com/mongodb/mongo/commit/1ceca5e2c723996de6993ccbdecb3bb526269116

Comment by auto [ 27/Nov/12 ]

Author:

{u'date': u'2012-11-15T00:00:24Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to generic commands
Branch: master
https://github.com/mongodb/mongo/commit/5864a3ca451034227246478621ff886bddb66652

Comment by auto [ 27/Nov/12 ]

Author:

{u'date': u'2012-11-13T21:31:40Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to replica set commands
Branch: master
https://github.com/mongodb/mongo/commit/cce08d2ad71b42a877beedf6dbcbe0acdf067358

Comment by auto [ 27/Nov/12 ]

Author:

{u'date': u'2012-11-13T17:25:05Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to public commands in mongos
Branch: master
https://github.com/mongodb/mongo/commit/a950145bcd1cbdaccce9432d4c8b219fe9655ea0

Comment by auto [ 27/Nov/12 ]

Author:

{u'date': u'2012-11-12T23:06:48Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Assign required privileges to sharding admin commands
Branch: master
https://github.com/mongodb/mongo/commit/c594cc09d1bf68243b1e380828db5b1f49b4cc82

Comment by auto [ 26/Nov/12 ]

Author:

{u'date': u'2012-11-09T00:46:35Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: SERVER-7122 Begin assigning required privileges to commands.
Branch: master
https://github.com/mongodb/mongo/commit/a4526bad1cf9984e11529aca3e6cb7ad58102f94

Comment by auto [ 07/Nov/12 ]

Author:

{u'date': u'2012-11-06T23:40:38Z', u'email': u'spencer@10gen.com', u'name': u'Spencer T Brody'}

Message: Add method on Command to get the Privileges required to run that command. SERVER-7572 SERVER-7122
Branch: master
https://github.com/mongodb/mongo/commit/ea421b12958bfa1001ae1c66eef6a6af639d7140

Comment by Andy Schwerin [ 07/Nov/12 ]

Reassigning to Spencer for implementation.

Generated at Thu Feb 08 03:13:41 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.