diff options
| author | Mark Benvenuto <mark.benvenuto@mongodb.com> | 2021-03-31 11:02:01 -0400 |
|---|---|---|
| committer | Evergreen Agent <no-reply@evergreen.mongodb.com> | 2021-03-31 15:47:25 +0000 |
| commit | f95c2363a29012bde34228a05975e1466c1f76a6 (patch) | |
| tree | 8f162a0e48ce4aaa7c9311f9649e6a8c9609e5be /src/mongo/db/query/find_command.idl | |
| parent | aa782b450fccfbdde455c2119f9deab08804557b (diff) | |
| download | mongo-f95c2363a29012bde34228a05975e1466c1f76a6.tar.gz | |
SERVER-54527 Add access_check: complex to existing commands that are not aggregate
Diffstat (limited to 'src/mongo/db/query/find_command.idl')
| -rw-r--r-- | src/mongo/db/query/find_command.idl | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/src/mongo/db/query/find_command.idl b/src/mongo/db/query/find_command.idl index 6f5c8bc5d53..c6ccaf9661f 100644 --- a/src/mongo/db/query/find_command.idl +++ b/src/mongo/db/query/find_command.idl @@ -36,6 +36,8 @@ global: - "mongo/db/query/max_time_ms_parser.h" imports: + - "mongo/db/auth/action_type.idl" + - "mongo/db/auth/access_checks.idl" - "mongo/db/logical_session_id.idl" - "mongo/db/pipeline/legacy_runtime_constants.idl" - "mongo/idl/basic_types.idl" @@ -72,6 +74,15 @@ commands: namespace: concatenate_with_db_or_uuid non_const_getter: true api_version: "1" + access_check: + complex: + - check: is_authorized_to_parse_namespace_element + - privilege: + resource_pattern: exact_namespace + action_type: find + - privilege: + resource_pattern: cluster + action_type: useUUID reply_type: CursorInitialReply fields: filter: @@ -199,7 +210,7 @@ commands: default: mongo::BSONObj() unstable: true _use44SortKeys: - description: "An internal parameter used to determine the serialization format for sort + description: "An internal parameter used to determine the serialization format for sort keys. TODO SERVER-47065: A 4.7+ node still has to accept the '_use44SortKeys' field, since it could be included in a command sent from a 4.4 mongos. When 5.0 becomes last-lts, this code to tolerate the '_use44SortKeys' field can be deleted." |