diff options
Diffstat (limited to 'src/mongo/db/commands/kill_sessions_command.cpp')
-rw-r--r-- | src/mongo/db/commands/kill_sessions_command.cpp | 134 |
1 files changed, 134 insertions, 0 deletions
diff --git a/src/mongo/db/commands/kill_sessions_command.cpp b/src/mongo/db/commands/kill_sessions_command.cpp new file mode 100644 index 00000000000..6460863d599 --- /dev/null +++ b/src/mongo/db/commands/kill_sessions_command.cpp @@ -0,0 +1,134 @@ +/** + * Copyright (C) 2017 MongoDB Inc. + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License, version 3, + * as published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + * + * As a special exception, the copyright holders give permission to link the + * code of portions of this program with the OpenSSL library under certain + * conditions as described in each individual source file and distribute + * linked combinations including the program with the OpenSSL library. You + * must comply with the GNU Affero General Public License in all respects + * for all of the code used other than as permitted herein. If you modify + * file(s) with this exception, you may extend this exception to your + * version of the file(s), but you are not obligated to do so. If you do not + * wish to do so, delete this exception statement from your version. If you + * delete this exception statement from all source files in the program, + * then also delete it in the license file. + */ + +#define MONGO_LOG_DEFAULT_COMPONENT ::mongo::logger::LogComponent::kCommand + +#include "mongo/platform/basic.h" + +#include "mongo/base/init.h" +#include "mongo/db/auth/action_set.h" +#include "mongo/db/auth/action_type.h" +#include "mongo/db/auth/authorization_manager.h" +#include "mongo/db/auth/authorization_session.h" +#include "mongo/db/auth/privilege.h" +#include "mongo/db/client.h" +#include "mongo/db/commands.h" +#include "mongo/db/jsobj.h" +#include "mongo/db/kill_sessions.h" +#include "mongo/db/kill_sessions_common.h" +#include "mongo/db/kill_sessions_local.h" +#include "mongo/db/logical_session_cache.h" +#include "mongo/db/logical_session_id.h" +#include "mongo/db/logical_session_id_helpers.h" +#include "mongo/db/operation_context.h" +#include "mongo/db/stats/top.h" +#include "mongo/util/log.h" + +namespace mongo { + +namespace { + +KillAllSessionsByPatternSet patternsForLoggedInUser(OperationContext* opCtx) { + auto client = opCtx->getClient(); + ServiceContext* serviceContext = client->getServiceContext(); + + KillAllSessionsByPatternSet patterns; + + if (AuthorizationManager::get(serviceContext)->isAuthEnabled()) { + auto authzSession = AuthorizationSession::get(client); + for (auto iter = authzSession->getAuthenticatedUserNames(); iter.more(); iter.next()) { + User* user = authzSession->lookupUser(*iter); + invariant(user); + + auto pattern = makeKillAllSessionsByPattern(opCtx); + pattern.setUid(user->getDigest()); + patterns.emplace(std::move(pattern)); + } + } else { + patterns.emplace(makeKillAllSessionsByPattern(opCtx)); + } + + return patterns; +} + +} // namespace + +class KillSessionsCommand final : public BasicCommand { + MONGO_DISALLOW_COPYING(KillSessionsCommand); + +public: + KillSessionsCommand() : BasicCommand("killSessions") {} + + bool slaveOk() const override { + return true; + } + bool adminOnly() const override { + return false; + } + bool supportsWriteConcern(const BSONObj& cmd) const override { + return false; + } + void help(std::stringstream& help) const override { + help << "kill a logical session and its operations"; + } + + // Any user can kill their own sessions + Status checkAuthForOperation(OperationContext* opCtx, + const std::string& dbname, + const BSONObj& cmdObj) override { + return Status::OK(); + } + + virtual bool run(OperationContext* opCtx, + const std::string& db, + const BSONObj& cmdObj, + BSONObjBuilder& result) override { + IDLParserErrorContext ctx("KillSessionsCmd"); + auto ksc = KillSessionsCmdFromClient::parse(ctx, cmdObj); + + KillAllSessionsByPatternSet patterns; + + if (ksc.getKillSessions().empty()) { + patterns = patternsForLoggedInUser(opCtx); + } else { + auto lsids = makeLogicalSessionIds( + ksc.getKillSessions(), + opCtx, + {Privilege{ResourcePattern::forClusterResource(), ActionType::killAnySession}}); + + patterns.reserve(lsids.size()); + for (const auto& lsid : lsids) { + patterns.emplace(makeKillAllSessionsByPattern(opCtx, lsid)); + } + } + + return appendCommandStatus(result, killSessionsCmdHelper(opCtx, result, patterns)); + } +} killSessionsCommand; + +} // namespace mongo |