SERVER-17135 Add permissions on config.settings to backup auth role

2024-12-01 01:21:03 +01:00 · 2015-02-19 13:21:31 -05:00 · 2015-02-19 13:21:31 -05:00 · 44a8c494fc
commit 44a8c494fc
parent 7d8adb6da8
1 changed files with 8 additions and 0 deletions
--- a/src/mongo/db/auth/role_graph_builtin_roles.cpp
+++ b/src/mongo/db/auth/role_graph_builtin_roles.cpp
@ -544,6 +544,14 @@ namespace {
                Privilege(ResourcePattern::forExactNamespace(
                                  AuthorizationManager::versionCollectionNamespace),
                          ActionType::find));
+
+        ActionSet configSettingsActions;
+        configSettingsActions << ActionType::insert << ActionType::update << ActionType::find;
+        Privilege::addPrivilegeToPrivilegeVector(
+                privileges,
+                Privilege(ResourcePattern::forExactNamespace(NamespaceString("config",
+                                                                             "settings")),
+                          configSettingsActions));
    }

    void addRestorePrivileges(PrivilegeVector* privileges) {