[SERVER-82929] $listSearchIndexes requires find privilege action rather than listSearchIndexes privilege action as it intended Created: 08/Nov/23 Updated: 11/Jan/24 Resolved: 28/Nov/23 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Aggregation Framework |
| Affects Version/s: | 7.0.0, 6.0.7, 7.2.0-rc0, 7.1.0 |
| Fix Version/s: | 7.2.1, 7.3.0-rc0, 7.0.6, 6.0.14 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Max Hirschhorn | Assignee: | Gil Alon |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||||||
| Assigned Teams: |
Query Integration
|
||||||||||||||||||||
| Backwards Compatibility: | Fully Compatible | ||||||||||||||||||||
| Operating System: | ALL | ||||||||||||||||||||
| Backport Requested: |
v7.2, v7.0, v6.0
|
||||||||||||||||||||
| Sprint: | QI 2023-11-27, QI 2023-12-11 | ||||||||||||||||||||
| Participants: | |||||||||||||||||||||
| Description |
|
The $listSearchIndexes aggregation stage is registered by calling the DocumentSourceListSearchIndexes::LiteParsed::parse() static function. And the DocumentSourceListSearchIndexes::LiteParsed::parse() symbol resolves to the LiteParsedSearchStage::parse() base class static function. This leads to an instance of LiteParsedSearchStage being constructed rather than an instead of DocumentSourceListSearchIndexes::LiteParsed and therefore LiteParsedSearchStage::requiredPrivileges() being used for the authorization check rather than DocumentSourceListSearchIndexes::LiteParsed::requiredPrivileges() as intended.
|
| Comments |
| Comment by Githook User [ 10/Jan/24 ] |
|
Author: {'name': 'Gil Alon', 'email': 'gil.alon@mongodb.com', 'username': 'galon1'}Message: GitOrigin-RevId: 5684f1496f97dfdd25b9b15faddedf64da4ac2ab |
| Comment by Githook User [ 05/Jan/24 ] |
|
Author: {'name': 'Gil Alon', 'email': 'gil.alon@mongodb.com', 'username': 'galon1'}Message: (cherry picked from commit 240d84a4693e0fddb33e115d715e235e97657f80) GitOrigin-RevId: 5d33778dfdb043a6e24aa7a9250a17d0b24729c5 |
| Comment by Githook User [ 04/Jan/24 ] |
|
Author: {'name': 'Gil Alon', 'email': 'gil.alon@mongodb.com', 'username': 'galon1'}Message: (cherry picked from commit 240d84a4693e0fddb33e115d715e235e97657f80) |
| Comment by Githook User [ 27/Nov/23 ] |
|
Author: {'name': 'Gil Alon', 'email': 'gil.alon@mongodb.com', 'username': 'galon1'}Message: |
| Comment by Max Hirschhorn [ 08/Nov/23 ] |
|
This bug was found by inspection while I was reading through DocumentSourceListSearchIndexes and attempting to understand how it could be possible for mongos to not be incrementing its aggStageCounters for the $listSearchIndexes aggregation stage (SERVER-82928). |