allow non-admin users to view db.currentOp()

XMLWordPrintableJSON

    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None

      From SERVER-2610, it may be desirable to allow non-admin users to view in-progress operations. One use case might involve shared hosting.

      We could filter out unauthenticated databases in inProgCmd(). Might also want to audit existing operations to ensure we exclude all sensitive ops (e.g. query/update system.users), especially for read-only users.

            Assignee:
            Unassigned
            Reporter:
            Ben Becker (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: