Reimplement PrivilegeSet.

This new implementation embeds in PrivilegeSet the hierarchical privilege
checking algorithm.  This is necessary in order to allow a connection with
multiple authenticated princiapls to correctly resolve whether or not a
command is authorized, given the case where one principal's authority provides
some of the required privileges, and another's provides the rest.

SERVER-7767

1 files changed, 2 insertions, 1 deletions

diff --git a/src/mongo/db/auth/privilege.h b/src/mongo/db/auth/privilege.h
index b6326860805..eef476ea224 100644
--- a/src/mongo/db/auth/privilege.h
+++ b/src/mongo/db/auth/privilege.h
@@ -29,7 +29,8 @@ namespace mongo {
     class Privilege {
     public:
 
-        Privilege(const std::string& resource, ActionSet actions);
+        Privilege(const std::string& resource, const ActionType& action);
+        Privilege(const std::string& resource, const ActionSet& actions);
         ~Privilege() {}
 
         const std::string& getResource() const { return _resource; }