diff options
author | Isabella Siu <isabella.siu@10gen.com> | 2019-01-11 11:16:24 -0500 |
---|---|---|
committer | Isabella Siu <isabella.siu@10gen.com> | 2019-02-08 14:34:32 -0500 |
commit | 8e5e745e98d33633e7d24a2629f22cdba79d9851 (patch) | |
tree | 9e02d92dadcf67140fe8707d792e55cf12b5443e /src/mongo/db/query | |
parent | 7a7baa2539ec169335086e45c7d0b85ba7cdb877 (diff) | |
download | mongo-8e5e745e98d33633e7d24a2629f22cdba79d9851.tar.gz |
SERVER-37836 re-evaluate authorization for originating command in getMore
Diffstat (limited to 'src/mongo/db/query')
-rw-r--r-- | src/mongo/db/query/find.cpp | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/mongo/db/query/find.cpp b/src/mongo/db/query/find.cpp index da3ff98fb0c..a6aa3fc48ac 100644 --- a/src/mongo/db/query/find.cpp +++ b/src/mongo/db/query/find.cpp @@ -676,7 +676,8 @@ std::string runQuery(OperationContext* opCtx, AuthorizationSession::get(opCtx->getClient())->getAuthenticatedUserNames(), readConcernArgs, upconvertedQuery, - ClientCursorParams::LockPolicy::kLockExternally}); + ClientCursorParams::LockPolicy::kLockExternally, + {Privilege(ResourcePattern::forExactNamespace(nss), ActionType::find)}}); ccId = pinnedCursor.getCursor()->cursorid(); LOG(5) << "caching executor with cursorid " << ccId << " after returning " << numResults |