From 67257272a057635640318842ea05b28e8499f71a Mon Sep 17 00:00:00 2001 From: James Wahlin Date: Thu, 22 Dec 2016 17:04:08 -0500 Subject: SERVER-26734 indexStats action is not sufficient for $indexStats --- src/mongo/db/auth/authorization_session.cpp | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) (limited to 'src/mongo') diff --git a/src/mongo/db/auth/authorization_session.cpp b/src/mongo/db/auth/authorization_session.cpp index ea70a82907c..fe8e8be3f18 100644 --- a/src/mongo/db/auth/authorization_session.cpp +++ b/src/mongo/db/auth/authorization_session.cpp @@ -261,9 +261,8 @@ Status AuthorizationSession::checkAuthForAggregate(const NamespaceString& ns, PrivilegeVector privileges; if (dps::extractElementAtPath(cmdObj, "pipeline.0.$indexStats")) { - Privilege::addPrivilegeToPrivilegeVector( - &privileges, - Privilege(ResourcePattern::forAnyNormalResource(), ActionType::indexStats)); + Privilege::addPrivilegeToPrivilegeVector(&privileges, + Privilege(inputResource, ActionType::indexStats)); } else if (dps::extractElementAtPath(cmdObj, "pipeline.0.$collStats")) { Privilege::addPrivilegeToPrivilegeVector(&privileges, Privilege(inputResource, ActionType::collStats)); -- cgit v1.2.1