diff options
| author | Mark Benvenuto <mark.benvenuto@mongodb.com> | 2021-02-25 15:22:09 -0500 |
|---|---|---|
| committer | Evergreen Agent <no-reply@evergreen.mongodb.com> | 2021-02-25 22:45:55 +0000 |
| commit | afe0cd802663e0ee42387df1a2f694a62dcd8fd8 (patch) | |
| tree | d1f4f6cf26f71042582c45561bb224bf30fd73ce /src/mongo/db/auth/action_type.idl | |
| parent | 583a1ee38db44d359df465f387b9371f9ad1001b (diff) | |
| download | mongo-afe0cd802663e0ee42387df1a2f694a62dcd8fd8.tar.gz | |
SERVER-54500 Encode access_checks and resource_pattern match type as a string enums into IDL
Diffstat (limited to 'src/mongo/db/auth/action_type.idl')
| -rw-r--r-- | src/mongo/db/auth/action_type.idl | 23 |
1 files changed, 21 insertions, 2 deletions
diff --git a/src/mongo/db/auth/action_type.idl b/src/mongo/db/auth/action_type.idl index dc5cd41ca3d..e490534ffcb 100644 --- a/src/mongo/db/auth/action_type.idl +++ b/src/mongo/db/auth/action_type.idl @@ -11,7 +11,7 @@ # # You should have received a copy of the Server Side Public License # along with this program. If not, see -# <http://www.mongodb.com/licensing/serversidepubliclicense>. +# <http://www.mongodb.com/licensing/server-side-public-license>. # # As a special exception, the copyright holders give permission to link the # code of portions of this program with the OpenSSL library under certain @@ -32,7 +32,8 @@ # also may change between versions. # # Actions marked "ID only" are not used for permission checks, but to identify events in logs. - +global: + cpp_namespace: "mongo" enums: ActionType: @@ -172,3 +173,21 @@ enums: viewRole : "viewRole" viewUser : "viewUser" + MatchType: + description: "test" + type: string + values: + # Matches no resource. + kMatchNever : "never" + # Matches if the resource is the cluster resource. + kMatchClusterResource : "cluster" + # Matches if the resource's database name is _ns.db(). + kMatchDatabaseName : "database" + # Matches if the resource's collection name is _ns.coll(). + kMatchCollectionName : "collection" + # Matches if the resource's namespace name is _ns. + kMatchExactNamespace : "exact_namespace" + # Matches all databases and non-system collections. + kMatchAnyNormalResource : "any_normal" + # Matches absolutely anything. + kMatchAnyResource : "any" |