SERVER-37836 re-evaluate authorization for originating command in getMore

1 files changed, 7 insertions, 0 deletions

diff --git a/src/mongo/s/query/cluster_client_cursor.h b/src/mongo/s/query/cluster_client_cursor.h
index 06d7efb4abf..e9e3afb6b0f 100644
--- a/src/mongo/s/query/cluster_client_cursor.h
+++ b/src/mongo/s/query/cluster_client_cursor.h
@@ -113,6 +113,13 @@ public:
     virtual BSONObj getOriginatingCommand() const = 0;
 
     /**
+     * Returns the privileges required to run a getMore against this cursor. This is the same as the
+     * set of privileges which would have been required to create the cursor in the first place.
+     */
+    virtual const PrivilegeVector& getOriginatingPrivileges() const& = 0;
+    void getOriginatingPrivileges() && = delete;
+
+    /**
      * Returns a reference to the vector of remote hosts involved in this operation.
      */
     virtual std::size_t getNumRemotes() const = 0;