Skip to content

Commit 2c03b97

Browse files
author
Sam Kleinman
committed
DOCS-4515: copydb permissions changes
1 parent b5fb56a commit 2c03b97

File tree

1 file changed

+8
-24
lines changed

1 file changed

+8
-24
lines changed

source/includes/access-copydb.rst

Lines changed: 8 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -31,45 +31,29 @@ database. For example:
3131
.. source-not-admin
3232
3333
If the source database is a non-``admin`` database, you must have
34-
privileges that specify :authaction:`find` action on the source
35-
database, and :authaction:`find` action on the ``system.js`` collection
36-
in the source database. For example:
34+
privileges that specify :authaction:`find`, :authaction:`listCollections`,
35+
and :authaction:`listIndexes` actions on the source database, and
36+
:authaction:`find` action on the ``system.js`` collection in the
37+
source database. For example:
3738

3839
.. code-block:: javascript
3940
40-
{ resource: { db: "mySourceDB", collection: "" }, actions: [ "find" ] }
41+
{ resource: { db: "mySourceDB", collection: "" }, actions: [ "find", "listCollections", "listIndexes" ] }
4142
{ resource: { db: "mySourceDB", collection: "system.js" }, actions: [ "find" ] }
4243
43-
If the source database is on a remote server, you also need the
44-
:authaction:`find` action on the ``system.indexes`` and
45-
``system.namespaces`` collections in the source database; e.g.
46-
47-
.. code-block:: javascript
48-
49-
{ resource: { db: "mySourceDB", collection: "system.indexes" }, actions: [ "find" ] }
50-
{ resource: { db: "mySourceDB", collection: "system.namespaces" }, actions: [ "find" ] }
51-
5244
.. source-admin
5345
5446
If the source database is the ``admin`` database, you must have
55-
privileges that specify :authaction:`find` action on the ``admin``
47+
privileges that specify :authaction:`find`, :authaction:`listCollections`,
48+
and :authaction:`listIndexes` actions on the ``admin``
5649
database, and :authaction:`find` action on the ``system.js``,
5750
``system.users``, ``system.roles``, and ``system.version`` collections
5851
in the ``admin`` database. For example:
5952

6053
.. code-block:: javascript
6154
62-
{ resource: { db: "admin", collection: "" }, actions: [ "find" ] }
55+
{ resource: { db: "admin", collection: "" }, actions: [ "find", "listCollections", "listIndexes" ] }
6356
{ resource: { db: "admin", collection: "system.js" }, actions: [ "find" ] }
6457
{ resource: { db: "admin", collection: "system.users" }, actions: [ "find" ] }
6558
{ resource: { db: "admin", collection: "system.roles" }, actions: [ "find" ] }
6659
{ resource: { db: "admin", collection: "system.version" }, actions: [ "find" ] }
67-
68-
If the source database is on a remote server, the you also need the
69-
:authaction:`find` action on the ``system.indexes`` and
70-
``system.namespaces`` collections in the ``admin`` database; e.g.
71-
72-
.. code-block:: javascript
73-
74-
{ resource: { db: "admin", collection: "system.indexes" }, actions: [ "find" ] }
75-
{ resource: { db: "admin", collection: "system.namespaces" }, actions: [ "find" ] }

0 commit comments

Comments
 (0)