From 447908c5a5a35013d9c04c89ac41d574530a5512 Mon Sep 17 00:00:00 2001 From: nathan-contino-mongo Date: Fri, 20 Sep 2019 17:03:24 -0400 Subject: [PATCH] DOCS-12762: replSetReconfigure permission details --- source/reference/command/replSetReconfig.txt | 9 +++++++++ source/reference/method/rs.reconfig.txt | 18 ++++++++++++++++++ 2 files changed, 27 insertions(+) diff --git a/source/reference/command/replSetReconfig.txt b/source/reference/command/replSetReconfig.txt index 5d62a60bebd..dd3b7325ead 100644 --- a/source/reference/command/replSetReconfig.txt +++ b/source/reference/command/replSetReconfig.txt @@ -52,6 +52,15 @@ replSetReconfig Considerations -------------- +Access Control +~~~~~~~~~~~~~~ + +To run the command on deployments that enforce :doc:`access +control`, the user must have +:authaction:`replSetConfigure` privilege action on the cluster resource. +The :authrole:`clusterManager` built-in role on the ``admin`` database +provides the required privileges for this command. + Locking Behavior ~~~~~~~~~~~~~~~~ diff --git a/source/reference/method/rs.reconfig.txt b/source/reference/method/rs.reconfig.txt index 1d3888ffa45..01a73d24ad9 100644 --- a/source/reference/method/rs.reconfig.txt +++ b/source/reference/method/rs.reconfig.txt @@ -66,6 +66,24 @@ Definition Consideration ------------- +Access Control +~~~~~~~~~~~~~~ + +To run the method on deployments that enforce :doc:`access +control`, the user must have +:authaction:`replSetConfigure` privilege action on the cluster resource. +The :authrole:`clusterManager` built-in role on the ``admin`` database +provides the required privileges for this command. + +Locking Behavior +~~~~~~~~~~~~~~~~ + +:method:`rs.reconfig()` obtains a special mutually +exclusive lock to prevent more than one +:method:`rs.reconfig()` operation from occurring at the same +time. + + Mixed Version Replica Set ~~~~~~~~~~~~~~~~~~~~~~~~~