Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-63174

Add "mayBypassWriteBlockingMode" method to AuthorizationSession

    • Type: Icon: Task Task
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 5.3.0
    • Affects Version/s: None
    • Component/s: None
    • None
    • Fully Compatible
    • Security 2022-02-07, Security 2022-02-21

      We must add an ActionType named bypassWriteBlockingMode, and attach it to the restore role.

      AuthorizationSession should maintain a cached copy of whether it is authorized for this ActionType on the cluster resource. This cache should be updated whenever a user's authorization right are added to, removed from, or updated within the Session.

      We must add a mayBypassWriteBlockingMode method to the AuthorizationSession, which will access the cached value with as minimal overhead as possible.

      We should include C++ unittests to validate that the cache update behaviour is reflected in mayBypassWriteBlockingMode.

            Assignee:
            gabriel.marks@mongodb.com Gabriel Marks
            Reporter:
            spencer.jackson@mongodb.com Spencer Jackson
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: