Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-54964

Require valid clients for all audit events

    • Type: Icon: Task Task
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 4.9.0
    • Affects Version/s: None
    • Component/s: None
    • None
    • Fully Compatible
    • Security 2021-03-22

      We take a client pointer to our audit hooks but allow for it to be nullptr. Audit events are related to changes in storage, networking, or other stateful systems, thus we should always have at least a client if not an opCtx. We should invariant that the client exists and fix places where it does not. (Notably, logLogout fails to acquire the current client during client decoration destruction.)

            Assignee:
            ben.caimano@mongodb.com Benjamin Caimano (Inactive)
            Reporter:
            ben.caimano@mongodb.com Benjamin Caimano (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: