/** * Copyright (C) 2019-present MongoDB, Inc. * * This program is free software: you can redistribute it and/or modify * it under the terms of the Server Side Public License, version 1, * as published by MongoDB, Inc. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * Server Side Public License for more details. * * You should have received a copy of the Server Side Public License * along with this program. If not, see * . * * As a special exception, the copyright holders give permission to link the * code of portions of this program with the OpenSSL library under certain * conditions as described in each individual source file and distribute * linked combinations including the program with the OpenSSL library. You * must comply with the Server Side Public License in all respects for * all of the code used other than as permitted herein. If you modify file(s) * with this exception, you may extend this exception to your version of the * file(s), but you are not obligated to do so. If you do not wish to do so, * delete this exception statement from your version. If you delete this * exception statement from all source files in the program, then also delete * it in the license file. */ #define MONGO_LOGV2_DEFAULT_COMPONENT ::mongo::logv2::LogComponent::kCommand #include "mongo/platform/basic.h" #include "mongo/db/auth/authorization_session.h" #include "mongo/db/commands.h" #include "mongo/db/commands/rwc_defaults_commands_gen.h" #include "mongo/db/dbdirectclient.h" #include "mongo/db/namespace_string.h" #include "mongo/db/ops/write_ops.h" #include "mongo/db/read_write_concern_defaults.h" #include "mongo/db/repl/read_concern_args.h" #include "mongo/db/repl/replication_coordinator.h" #include "mongo/logv2/log.h" #include "mongo/rpc/get_status_from_command_result.h" namespace mongo { namespace { /** * Replaces the persisted default read/write concern document with a new one representing the given * defaults. Waits for the write concern on the given operation context to be satisfied before * returning. */ void updatePersistedDefaultRWConcernDocument(OperationContext* opCtx, const RWConcernDefault& rw) { DBDirectClient client(opCtx); const auto commandResponse = client.runCommand([&] { write_ops::Update updateOp(NamespaceString::kConfigSettingsNamespace); updateOp.setUpdates({[&] { write_ops::UpdateOpEntry entry; entry.setQ(BSON("_id" << ReadWriteConcernDefaults::kPersistedDocumentId)); // Note the _id is propagated from the query into the upserted document. entry.setU(rw.toBSON()); entry.setUpsert(true); return entry; }()}); return updateOp.serialize( BSON(WriteConcernOptions::kWriteConcernField << opCtx->getWriteConcern().toBSON())); }()); uassertStatusOK(getStatusFromWriteCommandReply(commandResponse->getCommandReply())); } void assertNotStandaloneOrShardServer(OperationContext* opCtx, StringData cmdName) { const auto replCoord = repl::ReplicationCoordinator::get(opCtx); uassert(51300, str::stream() << "'" << cmdName << "' is not supported on standalone nodes.", replCoord->isReplEnabled()); uassert(51301, str::stream() << "'" << cmdName << "' is not supported on shard nodes.", serverGlobalParams.clusterRole != ClusterRole::ShardServer); } auto makeResponse(const ReadWriteConcernDefaults::RWConcernDefaultAndTime& rwcDefault, bool inMemory) { GetDefaultRWConcernResponse response; response.setRWConcernDefault(rwcDefault); response.setLocalUpdateWallClockTime(rwcDefault.localUpdateWallClockTime()); if (inMemory) response.setInMemory(true); return response; } class SetDefaultRWConcernCommand : public TypedCommand { public: AllowedOnSecondary secondaryAllowed(ServiceContext*) const override { return AllowedOnSecondary::kNever; } bool adminOnly() const override { return true; } std::string help() const override { return "set the current read/write concern defaults (cluster-wide)"; } public: using Request = SetDefaultRWConcern; class Invocation final : public InvocationBase { public: using InvocationBase::InvocationBase; auto typedRun(OperationContext* opCtx) { assertNotStandaloneOrShardServer(opCtx, SetDefaultRWConcern::kCommandName); uassert(ErrorCodes::CommandNotSupported, str::stream() << "'" << SetDefaultRWConcern::kCommandName << "' is only supported in feature compatibility version 4.4", serverGlobalParams.featureCompatibility.getVersion() == ServerGlobalParams::FeatureCompatibility::Version::kFullyUpgradedTo44); auto& rwcDefaults = ReadWriteConcernDefaults::get(opCtx->getServiceContext()); auto newDefaults = rwcDefaults.generateNewConcerns( opCtx, request().getDefaultReadConcern(), request().getDefaultWriteConcern()); updatePersistedDefaultRWConcernDocument(opCtx, newDefaults); LOGV2(20498, "successfully set RWC defaults to {newDefaults}", "newDefaults"_attr = newDefaults.toBSON()); // Refresh to populate the cache with the latest defaults. rwcDefaults.refreshIfNecessary(opCtx); return makeResponse(rwcDefaults.getDefault(opCtx), false); } private: bool supportsWriteConcern() const override { return true; } void doCheckAuthorization(OperationContext* opCtx) const override { uassert(ErrorCodes::Unauthorized, "Unauthorized", AuthorizationSession::get(opCtx->getClient()) ->isAuthorizedForPrivilege(Privilege{ResourcePattern::forClusterResource(), ActionType::setDefaultRWConcern})); } NamespaceString ns() const override { return NamespaceString(request().getDbName(), ""); } }; } setDefaultRWConcernCommand; class GetDefaultRWConcernCommand : public TypedCommand { public: AllowedOnSecondary secondaryAllowed(ServiceContext*) const override { return AllowedOnSecondary::kAlways; } bool adminOnly() const override { return true; } std::string help() const override { return "get the current read/write concern defaults being applied by this node"; } public: using Request = GetDefaultRWConcern; class Invocation final : public InvocationBase { public: using InvocationBase::InvocationBase; auto typedRun(OperationContext* opCtx) { assertNotStandaloneOrShardServer(opCtx, GetDefaultRWConcern::kCommandName); auto& rwcDefaults = ReadWriteConcernDefaults::get(opCtx->getServiceContext()); const bool inMemory = request().getInMemory().value_or(false); if (!inMemory) { // If not asking for the in-memory values, force a refresh to find the most recent // defaults rwcDefaults.refreshIfNecessary(opCtx); } return makeResponse(rwcDefaults.getDefault(opCtx), inMemory); } private: bool supportsWriteConcern() const override { return false; } void doCheckAuthorization(OperationContext* opCtx) const override { uassert(ErrorCodes::Unauthorized, "Unauthorized", AuthorizationSession::get(opCtx->getClient()) ->isAuthorizedForPrivilege(Privilege{ResourcePattern::forClusterResource(), ActionType::getDefaultRWConcern})); } NamespaceString ns() const override { return NamespaceString(request().getDbName(), ""); } }; } getDefaultRWConcernCommand; } // namespace } // namespace mongo