summaryrefslogtreecommitdiff
path: root/src/mongo/db/pipeline/aggregate_command.idl
diff options
context:
space:
mode:
authorIsrael Hsu <israel.hsu@mongodb.com>2023-04-04 17:52:23 +0000
committerEvergreen Agent <no-reply@evergreen.mongodb.com>2023-04-04 19:19:18 +0000
commitb584db7ad2e3256b37aa0191bb2b1215a7aff709 (patch)
treee5e02718c6af4b9f2bba1a4927c2f32c0913f05d /src/mongo/db/pipeline/aggregate_command.idl
parente0a1eb3ce7cb84669666e94c9f37d1d3bffe53ec (diff)
downloadmongo-b584db7ad2e3256b37aa0191bb2b1215a7aff709.tar.gz
SERVER-69653 Add auth privilege requirements to the analyzeShardKey and configureQueryAnalyzer commands
Diffstat (limited to 'src/mongo/db/pipeline/aggregate_command.idl')
-rw-r--r--src/mongo/db/pipeline/aggregate_command.idl4
1 files changed, 4 insertions, 0 deletions
diff --git a/src/mongo/db/pipeline/aggregate_command.idl b/src/mongo/db/pipeline/aggregate_command.idl
index a4b890b033c..abdd3d5ea47 100644
--- a/src/mongo/db/pipeline/aggregate_command.idl
+++ b/src/mongo/db/pipeline/aggregate_command.idl
@@ -170,6 +170,10 @@ commands:
agg_stage: shardedDataDistribution
resource_pattern: cluster
action_type: shardedDataDistribution
+ - privilege: # $_analyzeShardKeyReadWriteDistribution
+ agg_stage: _analyzeShardKeyReadWriteDistribution
+ resource_pattern: exact_namespace
+ action_type: analyzeShardKey
# Note that the 'CursorInitialReply' is not the only response that an aggregate command
# could return. With 'explain' or 'exchange', the response would not include the fields in
# 'CursorInitialReply'. But using 'explain' or 'exchange' is unstable, but otherwise the