SERVER-50990: Include usernames and roleNames in createIndex audit event

1 files changed, 16 insertions, 0 deletions

diff --git a/src/mongo/db/audit.h b/src/mongo/db/audit.h
index 2fef0920bdf..6b8842c8aa2 100644
--- a/src/mongo/db/audit.h
+++ b/src/mongo/db/audit.h
@@ -57,6 +57,22 @@ class Document;
 namespace audit {
 
 /**
+ * Struct that temporarily stores client information when an audit hook
+ * executes on a separate thread with a new Client. In those cases, ImpersonatedClientAttrs
+ * can bundle all relevant client attributes necessary for auditing and be safely
+ * passed into the new thread, where the new Client will be loaded with the userNames and
+ * roleNames stored in ImpersonatedClientAttrs.
+ */
+struct ImpersonatedClientAttrs {
+    std::vector<UserName> userNames;
+    std::vector<RoleName> roleNames;
+
+    ImpersonatedClientAttrs() = default;
+
+    ImpersonatedClientAttrs(Client* client);
+};
+
+/**
  * Narrow API for the parts of mongo::Command used by the audit library.
  */
 class CommandInterface {