diff options
author | Spencer T Brody <spencer@10gen.com> | 2013-12-02 17:08:35 -0500 |
---|---|---|
committer | Spencer T Brody <spencer@10gen.com> | 2013-12-03 17:32:46 -0500 |
commit | 31ae185c623ea2d1662c48ce8f5c07daae33dd24 (patch) | |
tree | 68dc8b84948c12b9e1e9fe5d45a7bd35e60106e9 /src/mongo/db/auth | |
parent | 3873e146a896e1140576001ac14e7a2bc6b29163 (diff) | |
download | mongo-31ae185c623ea2d1662c48ce8f5c07daae33dd24.tar.gz |
Make changeOwnCustomData privilege target the user's database rather than the cluster
Diffstat (limited to 'src/mongo/db/auth')
-rw-r--r-- | src/mongo/db/auth/authorization_session.cpp | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/mongo/db/auth/authorization_session.cpp b/src/mongo/db/auth/authorization_session.cpp index 5288b646a43..bbab218f0b1 100644 --- a/src/mongo/db/auth/authorization_session.cpp +++ b/src/mongo/db/auth/authorization_session.cpp @@ -365,7 +365,8 @@ namespace { } ResourcePattern resourceSearchList[resourceSearchListCapacity]; const int resourceSearchListLength = - buildResourceSearchList(ResourcePattern::forClusterResource(), resourceSearchList); + buildResourceSearchList(ResourcePattern::forDatabaseName(userName.getDB()), + resourceSearchList); ActionSet actions; for (int i = 0; i < resourceSearchListLength; ++i) { |