[SERVER-76282] Ban user writes to implicitly replicated collections Created: 19/Apr/23 Updated: 19/Apr/23 Resolved: 19/Apr/23 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Improvement | Priority: | Major - P3 |
| Reporter: | Jordi Olivares Provencio | Assignee: | Jordi Olivares Provencio |
| Resolution: | Won't Fix | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Sprint: | Execution Team 2023-05-01 |
| Participants: |
| Description |
|
Right now, users can write to the implicitly replicated collections. These collections are special in that only deletes are replicated. Additionally, all of these collections are internal collections that should not be modifiable by users. We should ban all writes to these collection in an effort to remove potential misuse. This will not be enforced in standalone mode in order to allow maintenance operations. |
| Comments |
| Comment by Jordi Olivares Provencio [ 19/Apr/23 ] |
|
Closing this ticket as it contradicts with RBAC and may cause issues with administrator maintenance on replicated collections. |