[SERVER-73177] Make API compatibility check ignore access checks introduced by new aggregation stages Created: 22/Jan/23  Updated: 29/Oct/23  Resolved: 23/Jan/23

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: 6.3.0-rc0

Type: Task Priority: Major - P3
Reporter: Cheahuychou Mao Assignee: Cheahuychou Mao
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
is depended on by SERVER-68757 Make analyzeShardKey command calculat... Closed
Backwards Compatibility: Fully Compatible
Sprint: Sharding NYC 2023-02-06
Participants:

 Description   

For the permission compatibility check, it is safe to skip the permissions required only by new aggregation stages that are not present in the previous release. SERVER-63748 has made the compatibility check ignore privileges introduced by new aggregation stages. Specifically, it made the script ignore every "privilege" that is associated with an agg_stage not present in the old IDL (e.g. here). However, beside privileges, there are also access checks (defined here). Likewise, access checks that are introduced by new aggregate stages should also be ignored in the compatibility check. This is required by SERVER-68757 which will add a new aggregation stage that internally runs a find command which sometimes requires getMore commands, and therefore requires the check_cursor_session_privilege access check. 



 Comments   
Comment by Githook User [ 23/Jan/23 ]

Author:

{'name': 'Cheahuychou Mao', 'email': 'mao.cheahuychou@gmail.com', 'username': 'cheahuychou'}

Message: SERVER-73177 Make API compatibility check ignore access checks introduced by new aggregation stages
Branch: master
https://github.com/mongodb/mongo/commit/a8592499404fc582bcc56cbaa2de851fa9fb1cb2

Generated at Thu Feb 08 06:23:53 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.