summaryrefslogtreecommitdiff
path: root/src/mongo/db/pipeline/aggregate_command.idl
diff options
context:
space:
mode:
authorBenety Goh <benety@mongodb.com>2022-03-06 16:14:05 +0000
committerEvergreen Agent <no-reply@evergreen.mongodb.com>2022-03-06 16:43:15 +0000
commit75f6b70040f9ccc46888a91b3937079f83016831 (patch)
tree2738902a40ade1f2960b1edca2ed6988ce9c8011 /src/mongo/db/pipeline/aggregate_command.idl
parentc176492ec7c149a081585ad52416cdc630edab81 (diff)
downloadmongo-75f6b70040f9ccc46888a91b3937079f83016831.tar.gz
SERVER-64203 listCatalog aggregation stage requires listDatabase, listCollections, and listIndexes privileges.
Diffstat (limited to 'src/mongo/db/pipeline/aggregate_command.idl')
-rw-r--r--src/mongo/db/pipeline/aggregate_command.idl16
1 files changed, 16 insertions, 0 deletions
diff --git a/src/mongo/db/pipeline/aggregate_command.idl b/src/mongo/db/pipeline/aggregate_command.idl
index a30ce427578..4e309457f9d 100644
--- a/src/mongo/db/pipeline/aggregate_command.idl
+++ b/src/mongo/db/pipeline/aggregate_command.idl
@@ -123,6 +123,22 @@ commands:
- privilege: # $listCachedAndActiveUsers
resource_pattern: any_normal
action_type: listCachedAndActiveUsers
+ - privilege: # $listCatalog
+ agg_stage: listCatalog
+ resource_pattern: cluster
+ action_type: listDatabases
+ - privilege: # $listCatalog
+ agg_stage: listCatalog
+ resource_pattern: any_normal
+ action_type: [listCollections, listIndexes]
+ - privilege: # $listCatalog
+ agg_stage: listCatalog
+ resource_pattern: collection
+ action_type: [listCollections, listIndexes]
+ - privilege: # $listCatalog
+ agg_stage: listCatalog
+ resource_pattern: any_system_buckets
+ action_type: [listCollections, listIndexes]
- privilege: # $listSessions
resource_pattern: cluster
action_type: listSessions