diff --git a/source/reference/privilege-actions.txt b/source/reference/privilege-actions.txt index 1e341ea3cc2..2b676fc04aa 100644 --- a/source/reference/privilege-actions.txt +++ b/source/reference/privilege-actions.txt @@ -118,13 +118,6 @@ Database Management Actions .. todo:: I tried following the code on this but couldn't figure it out. -.. authaction:: planCacheHint - - .. todo:: I can't find this in the code. Is the blurb below correct? - - User can view and update admin hints. Apply this action to database - or collection resources. - .. authaction:: revokeRole User can remove any role from any user from any database in the system. @@ -372,13 +365,18 @@ Server Administration Actions Allows the user to rename collections on the current database using the :dbcommand:`renameCollection` command. Apply this action to database - or collection resources. + resources. + + To perform rename collections across databases, a user must have + :authaction:`renameCollectionSameDB` on the cluster resource, and + additionally have the following: - .. todo:: verify this: + - Either *have* :authaction:`find` on the source or *do not* have + :authaction:`find` on either the source or destination, to prevent + circumvention of the permission. - To perform rename collections across databases, a user must have the - :authaction:`createCollection`, :authaction:`dropCollection`, and - :authaction:`find` actions on the cluster resource. + - :authaction:`dropCollection` on the source, if the old collection is + to be dropped. .. authaction:: repairDatabase