backport of Make sharded killOp/curOp/unlock check auth SERVER-4250

1 files changed, 6 insertions, 0 deletions

diff --git a/s/strategy_single.cpp b/s/strategy_single.cpp
index 012be5fb3dd..fc206e5f080 100644
--- a/s/strategy_single.cpp
+++ b/s/strategy_single.cpp
@@ -182,6 +182,9 @@ namespace mongo {
             vector<Shard> shards;
 
             if ( strcmp( ns , "inprog" ) == 0 ) {
+
+                r.checkAuth();
+
                 Shard::getAllShards( shards );
 
                 BSONArrayBuilder arr( b.subarrayStart( "inprog" ) );
@@ -219,6 +222,9 @@ namespace mongo {
                 arr.done();
             }
             else if ( strcmp( ns , "killop" ) == 0 ) {
+
+                r.checkAuth();
+
                 BSONElement e = q.query["op"];
                 if ( strstr( r.getns() , "admin." ) != 0 ) {
                     b.append( "err" , "unauthorized" );