This repository was archived by the owner on May 1, 2025. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 39
DOCSP-47109-document-minimum-privileges #650
Merged
gmiller-mdb
merged 9 commits into
mongodb:master
from
gmiller-mdb:DOCSP-47109-DOCSP-document-minimum-privileges
Mar 13, 2025
Merged
Changes from all commits
Commits
Show all changes
9 commits
Select commit
Hold shift + click to select a range
89d9e22
DOCSP-47109-DOCSP-document-minimum-privileges
gmiller-mdb 865d75e
table stuff
gmiller-mdb 4aa53f9
table format
gmiller-mdb 8c939a1
fix build error
gmiller-mdb 990619d
spacing
gmiller-mdb b6d3f36
actual spacing
gmiller-mdb 33ce950
changed spacing to 3
gmiller-mdb 872ded5
re doing all of the spaces god
gmiller-mdb 9fe90f8
feedback
gmiller-mdb File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,112 @@ | ||
| .. list-table:: | ||
| :header-rows: 1 | ||
| :stub-columns: 1 | ||
| :widths: 10 20 | ||
|
|
||
| * - Sync Type | ||
| - Minimum Destination Privileges | ||
|
|
||
| * - Default | ||
| - .. code-block:: javascript | ||
|
|
||
| [ | ||
| { | ||
| "resource": { "cluster": true }, | ||
| "actions": [ | ||
| "appendOplogNote", | ||
| "enableSharding", | ||
| "getDefaultRWConcern", | ||
| "getShardMap", | ||
| "hostInfo", | ||
| "listDatabases", | ||
| "listShards", | ||
| "replSetGetConfig", | ||
| "replSetGetStatus", | ||
| "serverStatus" | ||
| ] | ||
| }, | ||
| { | ||
| "resource": { "db": "", "collection": "" }, | ||
| "actions": [ | ||
| "bypassDocumentValidation", | ||
| "changeStream", | ||
| "collMod", | ||
| "convertToCapped", | ||
| "createCollection", | ||
| "createIndex", | ||
| "dropCollection", | ||
| "dropIndex", | ||
| "enableSharding", | ||
| "find", | ||
| "indexStats", | ||
| "insert", | ||
| "listCollections", | ||
| "listIndexes", | ||
| "remove", | ||
| "renameCollectionSameDB", | ||
| "update", | ||
| "bypassWriteBlockingMode", | ||
| "setUserWriteBlockMode" | ||
| ] | ||
| }, | ||
| { | ||
| "resource": { "db": "admin", "collection": "system.version" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "", "collection": "system.js" }, | ||
| "actions": [ "listCollections", "listIndexes" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "shards" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "", "collection": "system.views" }, | ||
| "actions": [ "dropCollection" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "version" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "collections" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "settings" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "tags" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "system_buckets": "" }, | ||
| "actions": [ "listCollections", "listIndexes" ] | ||
| } | ||
| ] | ||
|
|
||
| * - Write Blocking | ||
| - Everything from the default destination privileges. | ||
|
|
||
| * - Reversing | ||
| - Everything from the default source privileges and the default destination | ||
| privileges with the addition of: | ||
|
|
||
| .. code-block:: javascript | ||
|
|
||
| [ | ||
| { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] } | ||
| ] | ||
|
|
||
| * - Multiple Reversals | ||
| - Everything from the default source privileges and the default destination | ||
| privileges with the addition of: | ||
|
|
||
| .. code-block:: javascript | ||
|
|
||
| [ | ||
| { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] } | ||
| ] | ||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,151 @@ | ||
| .. list-table:: | ||
| :header-rows: 1 | ||
| :stub-columns: 1 | ||
| :widths: 10 30 | ||
|
|
||
| * - Sync Type | ||
| - Minimum Source Privileges | ||
|
|
||
| * - Default | ||
| - .. code-block:: javascript | ||
|
|
||
| [ | ||
gmiller-mdb marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| { | ||
| "resource": { "cluster": true }, | ||
| "actions": [ | ||
| "appendOplogNote", | ||
| "getDefaultRWConcern", | ||
| "getShardMap", | ||
| "hostInfo", | ||
| "listDatabases", | ||
| "listShards", | ||
| "replSetGetConfig", | ||
| "replSetGetStatus", | ||
| "serverStatus" | ||
| ] | ||
| }, | ||
| { | ||
| "resource": { "db": "", "collection": "" }, | ||
| "actions": [ | ||
| "changeStream", | ||
| "collStats", | ||
| "find", | ||
| "indexStats", | ||
| "listCollections", | ||
| "listIndexes" | ||
| ] | ||
| }, | ||
| { | ||
| "resource": { "db": "admin", "collection": "system.version" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "", "collection": "system.js" }, | ||
| "actions": [ "listCollections", "listIndexes" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "shards" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "collections" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "version" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "settings" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "system_buckets": "" }, | ||
| "actions": [ "listCollections", "listIndexes" ] | ||
| } | ||
| ] | ||
|
|
||
| * - Write-blocking | ||
| - Everything from the default source privileges with the addition of: | ||
|
|
||
| .. code-block:: javascript | ||
|
|
||
| [ | ||
| { | ||
| "resource": { "cluster": true }, | ||
| "actions": [ "bypassWriteBlockingMode", "setUserWriteBlockMode" ] | ||
| } | ||
| ] | ||
|
|
||
| * - Reversing | ||
| - Everything from the default source privileges and the default destination | ||
| privileges. | ||
|
|
||
| * - Multiple Reversals | ||
| - Everything from the default source privileges and the default destination | ||
| privileges with the addition of: | ||
|
|
||
| .. code-block:: javascript | ||
|
|
||
| [ | ||
| { "resource": { "db": "", "collection": "" }, "actions": [ "dropDatabase" ] } | ||
| ] | ||
|
|
||
| * - V4.4 Migration | ||
| - .. code-block:: javascript | ||
|
|
||
| [ | ||
gmiller-mdb marked this conversation as resolved.
Show resolved
Hide resolved
|
||
| { | ||
| "resource": { "cluster": true }, | ||
| "actions": [ | ||
| "addShard", | ||
| "appendOplogNote", | ||
| "flushRouterConfig", | ||
| "getDefaultRWConcern", | ||
| "getShardMap", | ||
| "hostInfo", | ||
| "listDatabases", | ||
| "listShards", | ||
| "replSetGetConfig", | ||
| "replSetGetStatus", | ||
| "serverStatus" | ||
| ] | ||
| }, | ||
| { | ||
| "resource": { "db": "", "collection": "" }, | ||
| "actions": [ | ||
| "changeStream", | ||
| "collStats", | ||
| "find", | ||
| "indexStats", | ||
| "listCollections", | ||
| "listIndexes" | ||
| ] | ||
| }, | ||
| { | ||
| "resource": { "db": "admin", "collection": "system.version" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "", "collection": "system.js" }, | ||
| "actions": [ "listCollections", "listIndexes" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "shards" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "collections" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "version" }, | ||
| "actions": [ "find" ] | ||
| }, | ||
| { | ||
| "resource": { "db": "config", "collection": "settings" }, | ||
| "actions": [ "find" ] | ||
| } | ||
| ] | ||
|
|
||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.