diff options
| author | Mark Benvenuto <mark.benvenuto@mongodb.com> | 2021-03-31 11:02:01 -0400 |
|---|---|---|
| committer | Evergreen Agent <no-reply@evergreen.mongodb.com> | 2021-03-31 15:47:25 +0000 |
| commit | f95c2363a29012bde34228a05975e1466c1f76a6 (patch) | |
| tree | 8f162a0e48ce4aaa7c9311f9649e6a8c9609e5be /src/mongo/db/coll_mod.idl | |
| parent | aa782b450fccfbdde455c2119f9deab08804557b (diff) | |
| download | mongo-f95c2363a29012bde34228a05975e1466c1f76a6.tar.gz | |
SERVER-54527 Add access_check: complex to existing commands that are not aggregate
Diffstat (limited to 'src/mongo/db/coll_mod.idl')
| -rw-r--r-- | src/mongo/db/coll_mod.idl | 21 |
1 files changed, 16 insertions, 5 deletions
diff --git a/src/mongo/db/coll_mod.idl b/src/mongo/db/coll_mod.idl index e26c1da480a..ead45bab5cd 100644 --- a/src/mongo/db/coll_mod.idl +++ b/src/mongo/db/coll_mod.idl @@ -31,6 +31,8 @@ global: - "mongo/db/commands/create_command_validation.h" imports: + - "mongo/db/auth/action_type.idl" + - "mongo/db/auth/access_checks.idl" - "mongo/idl/basic_types.idl" - "mongo/db/catalog/collection_options.idl" @@ -68,7 +70,7 @@ structs: hidden_new: optional: true type: safeBool - + CollModClusteredIndex: description: "A type representing the adjustable options on clustered indexes" strict: true @@ -76,7 +78,7 @@ structs: expireAfterSeconds: description: "The number of seconds after which old data should be deleted. This can be disabled by passing in 'off' as a value" - type: + type: variant: [string, safeInt64] commands: @@ -87,11 +89,20 @@ commands: cpp_name: collMod strict: true api_version: "1" + access_check: + complex: + - check: should_ignore_auth_checks + - privilege: + resource_pattern: exact_namespace + action_type: collMod + - privilege: + resource_pattern: exact_namespace + action_type: find fields: index: description: "Index to be modified." optional: true - type: CollModIndex + type: CollModIndex validator: description: "Specify validation rules or expressions for the collection." type: object @@ -109,7 +120,7 @@ commands: type: ValidationAction optional: true viewOn: - description: "The name of the source collection or view that + description: "The name of the source collection or view that 'namespace' is based off of." type: string optional: true @@ -117,7 +128,7 @@ commands: callback: create_command_validation::validateViewOnNotEmpty pipeline: description: "An array that consists of the aggregation pipeline. Defines the view - by applying the specified pipeline to the 'viewOn' collection or + by applying the specified pipeline to the 'viewOn' collection or view." type: array<object> optional: true |