1 files changed, 134 insertions, 0 deletions
diff --git a/src/mongo/db/commands/kill_sessions_command.cpp b/src/mongo/db/commands/kill_sessions_command.cpp
new file mode 100644
index 00000000000..6460863d599
--- /dev/null
+++ b/src/mongo/db/commands/kill_sessions_command.cpp
@@ -0,0 +1,134 @@
+/**
+ * Copyright (C) 2017 MongoDB Inc.
+ *
+ * This program is free software: you can redistribute it and/or  modify
+ * it under the terms of the GNU Affero General Public License, version 3,
+ * as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ *
+ * As a special exception, the copyright holders give permission to link the
+ * code of portions of this program with the OpenSSL library under certain
+ * conditions as described in each individual source file and distribute
+ * linked combinations including the program with the OpenSSL library. You
+ * must comply with the GNU Affero General Public License in all respects
+ * for all of the code used other than as permitted herein. If you modify
+ * file(s) with this exception, you may extend this exception to your
+ * version of the file(s), but you are not obligated to do so. If you do not
+ * wish to do so, delete this exception statement from your version. If you
+ * delete this exception statement from all source files in the program,
+ * then also delete it in the license file.
+ */
+
+#define MONGO_LOG_DEFAULT_COMPONENT ::mongo::logger::LogComponent::kCommand
+
+#include "mongo/platform/basic.h"
+
+#include "mongo/base/init.h"
+#include "mongo/db/auth/action_set.h"
+#include "mongo/db/auth/action_type.h"
+#include "mongo/db/auth/authorization_manager.h"
+#include "mongo/db/auth/authorization_session.h"
+#include "mongo/db/auth/privilege.h"
+#include "mongo/db/client.h"
+#include "mongo/db/commands.h"
+#include "mongo/db/jsobj.h"
+#include "mongo/db/kill_sessions.h"
+#include "mongo/db/kill_sessions_common.h"
+#include "mongo/db/kill_sessions_local.h"
+#include "mongo/db/logical_session_cache.h"
+#include "mongo/db/logical_session_id.h"
+#include "mongo/db/logical_session_id_helpers.h"
+#include "mongo/db/operation_context.h"
+#include "mongo/db/stats/top.h"
+#include "mongo/util/log.h"
+
+namespace mongo {
+
+namespace {
+
+KillAllSessionsByPatternSet patternsForLoggedInUser(OperationContext* opCtx) {
+    auto client = opCtx->getClient();
+    ServiceContext* serviceContext = client->getServiceContext();
+
+    KillAllSessionsByPatternSet patterns;
+
+    if (AuthorizationManager::get(serviceContext)->isAuthEnabled()) {
+        auto authzSession = AuthorizationSession::get(client);
+        for (auto iter = authzSession->getAuthenticatedUserNames(); iter.more(); iter.next()) {
+            User* user = authzSession->lookupUser(*iter);
+            invariant(user);
+
+            auto pattern = makeKillAllSessionsByPattern(opCtx);
+            pattern.setUid(user->getDigest());
+            patterns.emplace(std::move(pattern));
+        }
+    } else {
+        patterns.emplace(makeKillAllSessionsByPattern(opCtx));
+    }
+
+    return patterns;
+}
+
+}  // namespace
+
+class KillSessionsCommand final : public BasicCommand {
+    MONGO_DISALLOW_COPYING(KillSessionsCommand);
+
+public:
+    KillSessionsCommand() : BasicCommand("killSessions") {}
+
+    bool slaveOk() const override {
+        return true;
+    }
+    bool adminOnly() const override {
+        return false;
+    }
+    bool supportsWriteConcern(const BSONObj& cmd) const override {
+        return false;
+    }
+    void help(std::stringstream& help) const override {
+        help << "kill a logical session and its operations";
+    }
+
+    // Any user can kill their own sessions
+    Status checkAuthForOperation(OperationContext* opCtx,
+                                 const std::string& dbname,
+                                 const BSONObj& cmdObj) override {
+        return Status::OK();
+    }
+
+    virtual bool run(OperationContext* opCtx,
+                     const std::string& db,
+                     const BSONObj& cmdObj,
+                     BSONObjBuilder& result) override {
+        IDLParserErrorContext ctx("KillSessionsCmd");
+        auto ksc = KillSessionsCmdFromClient::parse(ctx, cmdObj);
+
+        KillAllSessionsByPatternSet patterns;
+
+        if (ksc.getKillSessions().empty()) {
+            patterns = patternsForLoggedInUser(opCtx);
+        } else {
+            auto lsids = makeLogicalSessionIds(
+                ksc.getKillSessions(),
+                opCtx,
+                {Privilege{ResourcePattern::forClusterResource(), ActionType::killAnySession}});
+
+            patterns.reserve(lsids.size());
+            for (const auto& lsid : lsids) {
+                patterns.emplace(makeKillAllSessionsByPattern(opCtx, lsid));
+            }
+        }
+
+        return appendCommandStatus(result, killSessionsCmdHelper(opCtx, result, patterns));
+    }
+} killSessionsCommand;
+
+}  // namespace mongo