@@ -58,13 +58,8 @@ Every database includes the following client roles:
58
58
- :authaction:`killCursors`
59
59
- :authaction:`listIndexes`
60
60
- :authaction:`listCollections`
61
-
62
-
63
- .. include:: /includes/extracts/listDatabases-auth-4.0.6.rst
64
-
65
- .. include:: /includes/extracts/listDatabases-auth-4.0.5.rst
66
-
67
- .. include:: /includes/extracts/listDatabases-auth-4.0.0-4.0.4.rst
61
+
62
+ .. include:: /includes/listDatabases-auth.rst
68
63
69
64
.. authrole:: readWrite
70
65
@@ -224,8 +219,6 @@ Cluster Administration Roles
224
219
225
220
.. authrole:: clusterManager
226
221
227
- .. versionchanged:: 3.4
228
-
229
222
.. include:: /includes/extracts/built-in-roles-clusterManager.rst
230
223
231
224
On the cluster as a whole, permits the following actions:
@@ -238,9 +231,7 @@ Cluster Administration Roles
238
231
- :authaction:`applicationMessage`
239
232
- :authaction:`cleanupOrphaned`
240
233
- :authaction:`flushRouterConfig`
241
-
242
- - :authaction:`listSessions` (New in version 3.6)
243
-
234
+ - :authaction:`listSessions`
244
235
- :authaction:`listShards`
245
236
- :authaction:`removeShard`
246
237
- :authaction:`replSetConfigure`
@@ -254,7 +245,7 @@ Cluster Administration Roles
254
245
255
246
On *all* databases in the cluster, permits the following actions:
256
247
257
- - :authaction:`clearJumboFlag` (New in 4.2.3 and 4.0.15 )
248
+ - :authaction:`clearJumboFlag` (New in 4.2.3)
258
249
- :authaction:`enableSharding`
259
250
- :authaction:`moveChunk`
260
251
- :authaction:`splitVector`
@@ -359,16 +350,14 @@ Cluster Administration Roles
359
350
360
351
.. authrole:: clusterMonitor
361
352
362
- .. versionchanged:: 3.4
363
-
364
353
.. include:: /includes/extracts/built-in-roles-clusterMonitor.rst
365
354
366
355
Permits the following actions on the cluster as a whole:
367
356
368
357
.. hlist::
369
358
:columns: 2
370
359
371
- - :authaction:`checkFreeMonitoringStatus` (New in version 4.0)
360
+ - :authaction:`checkFreeMonitoringStatus`
372
361
- :authaction:`connPoolStats`
373
362
- :authaction:`getCmdLineOpts`
374
363
- :authaction:`getLog`
@@ -377,16 +366,13 @@ Cluster Administration Roles
377
366
- :authaction:`hostInfo`
378
367
- :authaction:`inprog`
379
368
- :authaction:`listDatabases`
380
-
381
- - :authaction:`listSessions` (New in version 3.6)
382
-
369
+ - :authaction:`listSessions`
383
370
- :authaction:`listShards`
384
371
- :authaction:`netstat`
385
372
- :authaction:`replSetGetConfig`
386
373
- :authaction:`replSetGetStatus`
387
374
- :authaction:`serverStatus`
388
- - :authaction:`setFreeMonitoring` (New in version 4.0)
389
-
375
+ - :authaction:`setFreeMonitoring`
390
376
- :authaction:`shardingState`
391
377
- :authaction:`top`
392
378
@@ -396,7 +382,7 @@ Cluster Administration Roles
396
382
- :authaction:`dbStats`
397
383
- :authaction:`getShardVersion`
398
384
- :authaction:`indexStats`
399
- - :authaction:`useUUID` (New in version 3.6)
385
+ - :authaction:`useUUID`
400
386
401
387
Permits the :authaction:`find` action on all :data:`system.profile
402
388
<<database>.system.profile>` collections in the cluster.
@@ -579,11 +565,11 @@ Backup and Restoration Roles
579
565
:data:`system.js <<database>.system.js>`, and
580
566
:data:`system.profile <<database>.system.profile>`
581
567
582
- - the :data:`admin.system.users` and :data:`admin.system.roles` collections
568
+ - The :data:`admin.system.users` and :data:`admin.system.roles` collections
583
569
584
- - the :data:`config.settings` collection
570
+ - The :data:`config.settings` collection
585
571
586
- - legacy ``system.users`` collections from versions of MongoDB prior to 2.6
572
+ - Legacy ``system.users`` collections from versions of MongoDB prior to 2.6
587
573
588
574
.. todo: Also provides the :authaction:`find` action on:
589
575
- system.new_users
@@ -708,21 +694,13 @@ All-Database Roles
708
694
709
695
.. include:: /includes/extracts/built-in-roles-readAnyDatabase.rst
710
696
711
- .. versionchanged:: 3.4
712
-
713
- .. include:: /includes/extracts/built-in-roles-readAnyDatabase-prior.rst
714
-
715
- .. include:: /includes/seealso-cluster-manager.rst
697
+ .. include:: /includes/seealso-cluster-manager.rst
716
698
717
699
.. authrole:: readWriteAnyDatabase
718
700
719
701
.. include:: /includes/extracts/built-in-roles-readWriteAnyDatabase.rst
720
702
721
- .. versionchanged:: 3.4
722
-
723
- .. include:: /includes/extracts/built-in-roles-readWriteAnyDatabase-prior.rst
724
-
725
- .. include:: /includes/seealso-cluster-manager.rst
703
+ .. include:: /includes/seealso-cluster-manager.rst
726
704
727
705
.. authrole:: userAdminAnyDatabase
728
706
@@ -746,14 +724,8 @@ All-Database Roles
746
724
- :authaction:`find`
747
725
- :authaction:`killCursors`
748
726
- :authaction:`planCacheRead`
749
-
750
- .. versionchanged:: 2.6.4
751
- :authrole:`userAdminAnyDatabase` added the following privilege
752
- actions on the :data:`admin.system.users` and
753
- :data:`admin.system.roles` collections:
754
-
755
- - :authaction:`createIndex`
756
- - :authaction:`dropIndex`
727
+ - :authaction:`createIndex`
728
+ - :authaction:`dropIndex`
757
729
758
730
The :authrole:`userAdminAnyDatabase` role does not restrict the privileges
759
731
that a user can grant. As a result, :authrole:`userAdminAnyDatabase` users
@@ -762,22 +734,13 @@ All-Database Roles
762
734
role does not explicitly authorize privileges beyond user administration.
763
735
This role is effectively a MongoDB system :ref:`superuser <superuser>`.
764
736
765
- .. versionchanged:: 3.4
766
-
767
- :authrole:`userAdminAnyDatabase` no longer
768
- applies to the ``local`` and ``config`` databases.
769
-
770
- .. include:: /includes/seealso-cluster-manager.rst
737
+ .. include:: /includes/seealso-cluster-manager.rst
771
738
772
739
.. authrole:: dbAdminAnyDatabase
773
740
774
741
.. include:: /includes/extracts/built-in-roles-dbAdminAnyDatabase.rst
775
742
776
- .. versionchanged:: 3.4
777
-
778
- .. include:: /includes/extracts/built-in-roles-dbAdminAnyDatabase-prior.rst
779
-
780
- .. include:: /includes/seealso-cluster-manager.rst
743
+ .. include:: /includes/seealso-cluster-manager.rst
781
744
782
745
.. _superuser:
783
746
@@ -802,11 +765,6 @@ The following role provides full privileges on all resources:
802
765
803
766
.. include:: /includes/extracts/built-in-roles-root.rst
804
767
805
- .. versionchanged:: 3.4
806
-
807
- The :authrole:`root` role includes privileges from the
808
- :authrole:`backup` and :authrole:`restore` roles.
809
-
810
768
Internal Role
811
769
-------------
812
770
0 commit comments