<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 03:02:22 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[SERVER-3199] Restrict user creation to admin only</title>
                <link>https://jira.mongodb.org/browse/SERVER-3199</link>
                <project id="10000" key="SERVER">Core Server</project>
                    <description>&lt;p&gt;Feature:&lt;br/&gt;
Restrict the creation of users to the admin only.&lt;/p&gt;

&lt;p&gt;Use Case:&lt;/p&gt;


&lt;p&gt;/* User can be added to DB test*/&lt;br/&gt;
&amp;gt; use test&lt;br/&gt;
switched to db test&lt;br/&gt;
&amp;gt; db.addUser(&quot;thetest&quot;,&quot;xxx&quot;); &lt;br/&gt;
{&lt;br/&gt;
	&quot;_id&quot; : ObjectId(&quot;4dd0a3aa7f39df02fe90fba7&quot;),&lt;br/&gt;
	&quot;user&quot; : &quot;thetest&quot;,&lt;br/&gt;
	&quot;readOnly&quot; : false,&lt;br/&gt;
	&quot;pwd&quot; : &quot;6acce88bf52666bb832d0d51d5b4e94a&quot;&lt;br/&gt;
}&lt;/p&gt;

&lt;p&gt;/* User can be auth&apos;ed and create data */&lt;br/&gt;
&amp;gt; db.auth(&quot;thetest&quot;,&quot;xxx&quot;);&lt;br/&gt;
1&lt;br/&gt;
&amp;gt; db.foobar.save(&lt;/p&gt;
{1:2}
&lt;p&gt;);&lt;br/&gt;
&amp;gt; db.foobar.find();&lt;/p&gt;
{ &quot;_id&quot; : ObjectId(&quot;4debd8a54f5c3a55b982b97c&quot;), &quot;1&quot; : 2 }

&lt;p&gt;/* This new user can now add another user in the test database - this should be prevented since they are not auth&apos;ed to the admin database  */&lt;br/&gt;
&amp;gt; db.addUser(&quot;thetest2&quot;,&quot;boohoo&quot;);&lt;br/&gt;
{&lt;br/&gt;
	&quot;user&quot; : &quot;thetest2&quot;,&lt;br/&gt;
	&quot;readOnly&quot; : false,&lt;br/&gt;
	&quot;pwd&quot; : &quot;0d2b4b28061638251db69fb85b32ee79&quot;&lt;br/&gt;
}&lt;/p&gt;
</description>
                <environment></environment>
        <key id="17924">SERVER-3199</key>
            <summary>Restrict user creation to admin only</summary>
                <type id="2" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14711&amp;avatarType=issuetype">New Feature</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="3">Duplicate</resolution>
                                        <assignee username="spencer@mongodb.com">Spencer Brody</assignee>
                                    <reporter username="alvin">Alvin Richards</reporter>
                        <labels>
                    </labels>
                <created>Sun, 5 Jun 2011 19:46:32 +0000</created>
                <updated>Fri, 15 Feb 2013 15:06:53 +0000</updated>
                            <resolved>Fri, 21 Dec 2012 20:08:52 +0000</resolved>
                                    <version>1.8.1</version>
                                                    <component>Security</component>
                                        <votes>2</votes>
                                    <watches>7</watches>
                                                                                                                <comments>
                            <comment id="171113" author="schwerin" created="Wed, 3 Oct 2012 20:23:02 +0000"  >&lt;p&gt;More granular roles in Mongo 2.4 should cover this case.  Linked to relevant tickets, &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-7122&quot; title=&quot;Assign commands to system roles&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-7122&quot;&gt;&lt;del&gt;SERVER-7122&lt;/del&gt;&lt;/a&gt; and &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-7126&quot; title=&quot;new authPrinciples and acquiredCapabilities data structures&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-7126&quot;&gt;&lt;del&gt;SERVER-7126&lt;/del&gt;&lt;/a&gt;.  Some of the details are still up in the air, but this use case ought to be covered.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                            <outwardlinks description="depends on">
                                        <issuelink>
            <issuekey id="17923">SERVER-3198</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="51258">SERVER-7122</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="51262">SERVER-7126</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is depended on by">
                                                        </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                                                <inwardlinks description="is related to">
                                                        </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Wed, 3 Oct 2012 20:23:02 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        11 years, 20 weeks ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[<s><a href='https://jira.mongodb.org/browse/SERVER-3198'>SERVER-3198</a></s>, <s><a href='https://jira.mongodb.org/browse/SERVER-7122'>SERVER-7122</a></s>, <s><a href='https://jira.mongodb.org/browse/SERVER-7126'>SERVER-7126</a></s>, <s><a href='https://jira.mongodb.org/browse/SECURITY-7'>SECURITY-7</a></s>]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>ian@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            11 years, 20 weeks ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                        <customfield id="customfield_10000" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Old_Backport</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10000"><![CDATA[No]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>alvin</customfieldvalue>
            <customfieldvalue>schwerin@mongodb.com</customfieldvalue>
            <customfieldvalue>spencer@mongodb.com</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hroymn:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hribev:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>20494</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_23361" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Requested By</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_22870" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Triagers</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hscqmv:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>