summaryrefslogtreecommitdiff
path: root/src/mongo/db/auth
diff options
context:
space:
mode:
authorBlake Oler <blake.oler@mongodb.com>2019-01-14 15:10:15 -0500
committerBlake Oler <blake.oler@mongodb.com>2019-01-21 15:13:43 -0500
commite575634f82f0c7763d4a43c30852951e017c330f (patch)
treef31392e2488ab1a8b7789ef2c664c408091c6d61 /src/mongo/db/auth
parent6a9a5855048df1f4796a4032276d01318c398691 (diff)
downloadmongo-e575634f82f0c7763d4a43c30852951e017c330f.tar.gz
SERVER-37875 Add serverStatus privilege to backup role
Diffstat (limited to 'src/mongo/db/auth')
-rw-r--r--src/mongo/db/auth/role_graph_builtin_roles.cpp1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/mongo/db/auth/role_graph_builtin_roles.cpp b/src/mongo/db/auth/role_graph_builtin_roles.cpp
index dd8bb4a8a15..0ac352e86ad 100644
--- a/src/mongo/db/auth/role_graph_builtin_roles.cpp
+++ b/src/mongo/db/auth/role_graph_builtin_roles.cpp
@@ -525,6 +525,7 @@ void addQueryableBackupPrivileges(PrivilegeVector* privileges) {
void addBackupPrivileges(PrivilegeVector* privileges) {
ActionSet clusterActions;
clusterActions << ActionType::appendOplogNote; // For BRS
+ clusterActions << ActionType::serverStatus; // For push based initial sync
Privilege::addPrivilegeToPrivilegeVector(
privileges, Privilege(ResourcePattern::forClusterResource(), clusterActions));