<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 03:26:00 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[SERVER-11526] GrantPrivilegesToRole and RemovePrivilegesFromRole audit record shows *all* privileges not *granted* privileges</title>
                <link>https://jira.mongodb.org/browse/SERVER-11526</link>
                <project id="10000" key="SERVER">Core Server</project>
                    <description>&lt;p&gt;The audit record lists &lt;b&gt;all&lt;/b&gt; the privileges the role has, not just the &lt;b&gt;granted&lt;/b&gt; ones.&lt;/p&gt;

&lt;p&gt;Here&apos;s BSON format&lt;/p&gt;
&lt;p/&gt;
&lt;div id=&quot;syntaxplugin&quot; class=&quot;syntaxplugin&quot; style=&quot;border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;&quot;&gt;
&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; border=&quot;0&quot; width=&quot;100%&quot; style=&quot;font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;&quot;&gt;
		&lt;tbody &gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;  margin-top: 10px;   margin-bottom: 10px;  width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;            {u&apos;remote&apos;: {u&apos;ip&apos;: u&apos;127.0.0.1&apos;, u&apos;port&apos;: 44284}, u&apos;users&apos;: [{u&apos;userSource&apos;: u&apos;admin&apos;, u&apos;user&apos;: u&apos;admin&apos;}], u&apos;atype&apos;: u&apos;grantPrivilegesToRole&apos;, u&apos;ts&apos;: datetime.datetime(2013, 11, 1, 16, 51, 51, 37000, tzinfo=&amp;lt;bson.tz_util.FixedOffset object at 0x238da50&amp;gt;), u&apos;param&apos;: {u&apos;db&apos;: u&apos;roledb34&apos;, u&apos;privileges&apos;: [{u&apos;resource&apos;: {u&apos;db&apos;: u&apos;roledb34&apos;, u&apos;collection&apos;: u&apos;thrip&apos;}, u&apos;actions&apos;: [u&apos;createRole&apos;, u&apos;createUser&apos;, u&apos;dropUser&apos;]}, {u&apos;resource&apos;: {u&apos;db&apos;: u&apos;admin&apos;, u&apos;collection&apos;: u&apos;&apos;}, u&apos;actions&apos;: [u&apos;collStats&apos;, u&apos;dbHash&apos;, u&apos;dbStats&apos;, u&apos;find&apos;, u&apos;killCursors&apos;]}, {u&apos;resource&apos;: {u&apos;db&apos;: u&apos;admin&apos;, u&apos;collection&apos;: u&apos;system.indexes&apos;}, u&apos;actions&apos;: [u&apos;collStats&apos;, u&apos;dbHash&apos;, u&apos;dbStats&apos;, u&apos;find&apos;, u&apos;killCursors&apos;]}, {u&apos;resource&apos;: {u&apos;db&apos;: u&apos;admin&apos;, u&apos;collection&apos;: u&apos;system.js&apos;}, u&apos;actions&apos;: [u&apos;collStats&apos;, u&apos;dbHash&apos;, u&apos;dbStats&apos;, u&apos;find&apos;, u&apos;killCursors&apos;]}, {u&apos;resource&apos;: {u&apos;db&apos;: u&apos;admin&apos;, u&apos;collection&apos;: u&apos;system.namespaces&apos;}, u&apos;actions&apos;: [u&apos;collStats&apos;, u&apos;dbHash&apos;, u&apos;dbStats&apos;, u&apos;find&apos;, u&apos;killCursors&apos;]}], u&apos;role&apos;: u&apos;role36&apos;}, u&apos;result&apos;: 0, u&apos;local&apos;: {u&apos;ip&apos;: u&apos;127.0.0.1&apos;, u&apos;port&apos;: 27017}}&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
			&lt;/tbody&gt;
&lt;/table&gt;
&lt;/div&gt;
&lt;p/&gt;

&lt;p&gt;Here&apos;s text format.&lt;/p&gt;
&lt;p/&gt;
&lt;div id=&quot;syntaxplugin&quot; class=&quot;syntaxplugin&quot; style=&quot;border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;&quot;&gt;
&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; border=&quot;0&quot; width=&quot;100%&quot; style=&quot;font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;&quot;&gt;
		&lt;tbody &gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;  margin-top: 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;            2013-11-01T12:58:02.636-0400 admin@admin 127.0.0.1:44302/127.0.0.1:27017 Granted to role role72@roledb70 the privileges: { resource: { db: &quot;roledb70&quot;, collection: &quot;thrip&quot; }, actions: [ &quot;createRole&quot;, &quot;createUser&quot;, &quot;dropUser&quot; ] }, { resource: { db: &quot;admin&quot;, collection: &quot;&quot; }, actions: [ &quot;collStats&quot;, &quot;dbHash&quot;, &quot;dbStats&quot;, &quot;find&quot;, &quot;killCursors&quot; ] }, { resource: { db: &quot;admin&quot;, collection: &quot;system.indexes&quot; }, actions: [ &quot;collStats&quot;, &quot;dbHash&quot;, &quot;dbStats&quot;, &quot;find&quot;, &quot;killCursors&quot; ] }, { resource: { db: &quot;admin&quot;, collection: &quot;system.js&quot; }, actions: [ &quot;collStats&quot;, &quot;dbHash&quot;, &quot;dbStats&quot;, &quot;find&quot;, &quot;killCursors&quot; ] }, { resource: { db: &quot;admin&quot;, collection: &quot;system.namespaces&quot; }, actions: [ &quot;collStats&quot;, &quot;dbHash&quot;, &quot;dbStats&quot;, &quot;find&quot;, &quot;killCursors&quot; ] }.&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   margin-bottom: 10px;  width: auto; padding: 0;&quot;&gt;&amp;nbsp;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
			&lt;/tbody&gt;
&lt;/table&gt;
&lt;/div&gt;
&lt;p/&gt;

&lt;p&gt;RemovePrivileges has the same problem. That&apos;s even worse &#8212; it lists as removed all the aspects of the role EXCEPT those which were removed.&lt;/p&gt;</description>
                <environment></environment>
        <key id="96743">SERVER-11526</key>
            <summary>GrantPrivilegesToRole and RemovePrivilegesFromRole audit record shows *all* privileges not *granted* privileges</summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="9">Done</resolution>
                                        <assignee username="matt.dannenberg">Matt Dannenberg</assignee>
                                    <reporter username="bard.bloom@10gen.com">bard.bloom@10gen.com</reporter>
                        <labels>
                            <label>26qa</label>
                    </labels>
                <created>Fri, 1 Nov 2013 16:59:46 +0000</created>
                <updated>Mon, 11 Jul 2016 17:39:55 +0000</updated>
                            <resolved>Fri, 1 Nov 2013 18:45:54 +0000</resolved>
                                                    <fixVersion>2.5.4</fixVersion>
                                                        <votes>0</votes>
                                    <watches>4</watches>
                                                                                                                <comments>
                            <comment id="450313" author="auto" created="Fri, 1 Nov 2013 18:43:29 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{u&apos;username&apos;: u&apos;dannenberg&apos;, u&apos;name&apos;: u&apos;matt dannenberg&apos;, u&apos;email&apos;: u&apos;matt.dannenberg@10gen.com&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-11526&quot; title=&quot;GrantPrivilegesToRole and RemovePrivilegesFromRole audit record shows *all* privileges not *granted* privileges&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-11526&quot;&gt;&lt;del&gt;SERVER-11526&lt;/del&gt;&lt;/a&gt; pass the correct privileges to the auditlogging of (grant|revoke)Privileges(To|From)Role&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/948ae1886077c520d5adc73840858d6bf79ca4af&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/948ae1886077c520d5adc73840858d6bf79ca4af&lt;/a&gt;&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                                                <inwardlinks description="is related to">
                                                        </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Fri, 1 Nov 2013 18:38:02 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        10 years, 15 weeks, 5 days ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>ramon.fernandez@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            10 years, 15 weeks, 5 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                        <customfield id="customfield_10000" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Old_Backport</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10000"><![CDATA[No]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10032" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Operating System</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10026"><![CDATA[ALL]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>auto</customfieldvalue>
            <customfieldvalue>bard.bloom@10gen.com</customfieldvalue>
            <customfieldvalue>matt.dannenberg</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrm8if:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hrtxu7:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>88614</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_23361" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Requested By</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_22870" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Triagers</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hsp69z:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>