1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
|
# -*- mode: python -*-
# List describing the ActionTypes that should be created.
# Please note that the order of the elements is not guaranteed to be the same across versions.
# This means that the integer value assigned to each ActionType and used internally in ActionSet
# also may change between versions.
["addShard",
"advanceClusterTime",
"anyAction", # Special ActionType that represents *all* actions
"appendOplogNote",
"applicationMessage",
"applyOps",
"auditLogRotate", # Not used for permissions checks, but to id the event in logs.
"authCheck", # Not used for permissions checks, but to id the authorization-checking event in logs.
"authenticate", # Not used for permission checks, but to id authentication events in logs.
"authSchemaUpgrade",
"bypassDocumentValidation",
"changeCustomData",
"changePassword",
"changeOwnPassword",
"changeOwnCustomData",
"changeStream",
"checkFreeMonitoringStatus",
"cleanupOrphaned",
"clearJumboFlag",
"closeAllDatabases", # Deprecated, needs to stay around for backwards compatibility
"collMod",
"collStats",
"compact",
"connPoolStats",
"connPoolSync",
"convertToCapped",
"cpuProfiler",
"createCollection",
"createDatabase", # Not used for permissions checks, but to id the event in logs.
"createIndex", # Not used for permissions checks, but to id the event in logs.
"createRole",
"createUser",
"dbHash",
"dbStats",
"dropAllRolesFromDatabase", # Not used for permissions checks, but to id the event in logs.
"dropAllUsersFromDatabase", # Not used for permissions checks, but to id the event in logs.
"dropCollection",
"dropConnections",
"dropDatabase",
"dropIndex",
"dropRole",
"dropUser",
"emptycapped",
"enableProfiler",
"enableSharding",
"find",
"flushRouterConfig",
"forceUUID",
"fsync",
"getDatabaseVersion",
"getCmdLineOpts",
"getLog",
"getParameter",
"getShardMap",
"getShardVersion",
"grantRole",
"grantPrivilegesToRole", # Not used for permissions checks, but to id the event in logs.
"grantRolesToRole", # Not used for permissions checks, but to id the event in logs.
"grantRolesToUser", # Not used for permissions checks, but to id the event in logs.
"hostInfo",
"impersonate",
"indexStats",
"inprog",
"insert",
"internal", # Special action type that represents internal actions
"invalidateUserCache",
"killAnyCursor",
"killAnySession",
"killCursors", # Deprecated in favor of killAnyCursor
"killop",
"listCachedAndActiveUsers",
"listCollections",
"listCursors",
"listDatabases",
"listIndexes",
"listSessions",
"listShards",
"logRotate",
"moveChunk",
"netstat",
"oidReset", # machine ID reset via the features command
"planCacheIndexFilter", # view/update index filters
"planCacheRead", # view contents of plan cache
"planCacheWrite", # clear cache, drop cache entry, pin/unpin/shun plans
"reIndex",
"remove",
"removeShard",
"renameCollection", # Not used for permissions checks, but to id the event in logs.
"renameCollectionSameDB",
"repairDatabase", # Deprecated, needs to stay around for backwards compatibility
"replSetConfigure",
"replSetGetConfig",
"replSetGetStatus",
"replSetHeartbeat",
"replSetReconfig", # Not used for permissions checks, but to id the event in logs.
"replSetResizeOplog",
"replSetStateChange",
"resync",
"revokeRole",
"revokePrivilegesFromRole", # Not used for permissions checks, but to id the event in logs.
"revokeRolesFromRole", # Not used for permissions checks, but to id the event in logs.
"revokeRolesFromUser", # Not used for permissions checks, but to id the event in logs.
"runAsLessPrivilegedUser",
"serverStatus",
"setAuthenticationRestriction",
"setFeatureCompatibilityVersion",
"setFreeMonitoring",
"setParameter",
"shardCollection", # Not used for permissions checks, but to id the event in logs.
"shardingState",
"shutdown",
"splitChunk",
"splitVector",
"storageDetails",
"top",
"touch",
"trafficRecord",
"unlock",
"useUUID",
"update",
"updateRole", # Not used for permissions checks, but to id the event in logs.
"updateUser", # Not used for permissions checks, but to id the event in logs.
"validate",
"viewRole",
"viewUser"]
|
