1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
# -*- mode: python -*-
# List describing the ActionTypes that should be created.
# Please note that the order of the elements is not guaranteed to be the same across versions.
# This means that the integer value assigned to each ActionType and used internally in ActionSet
# also may change between versions.
["addShard",
"advanceLogicalTime",
"anyAction", # Special ActionType that represents *all* actions
"appendOplogNote",
"applicationMessage",
"auditLogRotate", # Not used for permissions checks, but to id the event in logs.
"authCheck", # Not used for permissions checks, but to id the authorization-checking event in logs.
"authenticate", # Not used for permission checks, but to id authentication events in logs.
"authSchemaUpgrade",
"bypassDocumentValidation",
"changeCustomData",
"changePassword",
"changeOwnPassword",
"changeOwnCustomData",
"cleanupOrphaned",
"closeAllDatabases", # Deprecated, needs to stay around for backwards compatibility
"collMod",
"collStats",
"compact",
"connPoolStats",
"connPoolSync",
"convertToCapped",
"cpuProfiler",
"createCollection",
"createDatabase", # Not used for permissions checks, but to id the event in logs.
"createIndex", # Not used for permissions checks, but to id the event in logs.
"createRole",
"createUser",
"dbHash",
"dbStats",
"diagLogging",
"dropAllRolesFromDatabase", # Not used for permissions checks, but to id the event in logs.
"dropAllUsersFromDatabase", # Not used for permissions checks, but to id the event in logs.
"dropCollection",
"dropDatabase",
"dropIndex",
"dropRole",
"dropUser",
"emptycapped",
"enableProfiler",
"enableSharding",
"find",
"flushRouterConfig",
"fsync",
"getCmdLineOpts",
"getLog",
"getParameter",
"getShardMap",
"getShardVersion",
"grantRole",
"grantPrivilegesToRole", # Not used for permissions checks, but to id the event in logs.
"grantRolesToRole", # Not used for permissions checks, but to id the event in logs.
"grantRolesToUser", # Not used for permissions checks, but to id the event in logs.
"hostInfo",
"impersonate",
"indexStats",
"inprog",
"insert",
"internal", # Special action type that represents internal actions
"invalidateUserCache",
"killAnySession",
"killCursors",
"killop",
"listCollections",
"listDatabases",
"listIndexes",
"listSessions",
"listShards",
"logRotate",
"moveChunk",
"netstat",
"planCacheIndexFilter", # view/update index filters
"planCacheRead", # view contents of plan cache
"planCacheWrite", # clear cache, drop cache entry, pin/unpin/shun plans
"reIndex",
"remove",
"removeShard",
"renameCollection", # Not used for permissions checks, but to id the event in logs.
"renameCollectionSameDB",
"repairDatabase",
"replSetConfigure",
"replSetGetConfig",
"replSetGetStatus",
"replSetHeartbeat",
"replSetReconfig", # Not used for permissions checks, but to id the event in logs.
"replSetResizeOplog",
"replSetStateChange",
"resync",
"revokeRole",
"revokePrivilegesFromRole", # Not used for permissions checks, but to id the event in logs.
"revokeRolesFromRole", # Not used for permissions checks, but to id the event in logs.
"revokeRolesFromUser", # Not used for permissions checks, but to id the event in logs.
"serverStatus",
"setParameter",
"shardCollection", # Not used for permissions checks, but to id the event in logs.
"shardingState",
"shutdown",
"splitChunk",
"splitVector",
"storageDetails",
"top",
"touch",
"unlock",
"update",
"updateRole", # Not used for permissions checks, but to id the event in logs.
"updateUser", # Not used for permissions checks, but to id the event in logs.
"validate",
"viewRole",
"viewUser"]
|
