Skip to content

Commit c1bfdcc

Browse files
committed
fix: access
1 parent 5043894 commit c1bfdcc

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

src/tools/atlas/metadata/connectCluster.ts

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,16 @@ export class ConnectClusterTool extends AtlasToolBase {
5151

5252
const expiryDate = new Date(Date.now() + EXPIRY_MS);
5353

54+
const readOnly =
55+
this.config.readOnly ||
56+
(this.config.disabledTools?.includes("create") &&
57+
this.config.disabledTools?.includes("update") &&
58+
this.config.disabledTools?.includes("delete") &&
59+
!this.config.disabledTools?.includes("read") &&
60+
!this.config.disabledTools?.includes("metadata"));
61+
62+
const roleName = readOnly ? "readAnyDatabase" : "readWriteAnyDatabase";
63+
5464
await this.session.apiClient.createDatabaseUser({
5565
params: {
5666
path: {
@@ -62,7 +72,7 @@ export class ConnectClusterTool extends AtlasToolBase {
6272
groupId: projectId,
6373
roles: [
6474
{
65-
roleName: "readWriteAnyDatabase",
75+
roleName,
6676
databaseName: "admin",
6777
},
6878
],

0 commit comments

Comments
 (0)