diff options
| author | Isabella Siu <isabella.siu@10gen.com> | 2019-01-11 11:16:24 -0500 |
|---|---|---|
| committer | Isabella Siu <isabella.siu@10gen.com> | 2019-02-08 14:34:32 -0500 |
| commit | 8e5e745e98d33633e7d24a2629f22cdba79d9851 (patch) | |
| tree | 9e02d92dadcf67140fe8707d792e55cf12b5443e /src/mongo/db/query | |
| parent | 7a7baa2539ec169335086e45c7d0b85ba7cdb877 (diff) | |
| download | mongo-8e5e745e98d33633e7d24a2629f22cdba79d9851.tar.gz | |
SERVER-37836 re-evaluate authorization for originating command in getMore
Diffstat (limited to 'src/mongo/db/query')
| -rw-r--r-- | src/mongo/db/query/find.cpp | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/mongo/db/query/find.cpp b/src/mongo/db/query/find.cpp index da3ff98fb0c..a6aa3fc48ac 100644 --- a/src/mongo/db/query/find.cpp +++ b/src/mongo/db/query/find.cpp @@ -676,7 +676,8 @@ std::string runQuery(OperationContext* opCtx, AuthorizationSession::get(opCtx->getClient())->getAuthenticatedUserNames(), readConcernArgs, upconvertedQuery, - ClientCursorParams::LockPolicy::kLockExternally}); + ClientCursorParams::LockPolicy::kLockExternally, + {Privilege(ResourcePattern::forExactNamespace(nss), ActionType::find)}}); ccId = pinnedCursor.getCursor()->cursorid(); LOG(5) << "caching executor with cursorid " << ccId << " after returning " << numResults |