@@ -58,13 +58,8 @@ Every database includes the following client roles:
58
58
- :authaction:`killCursors`
59
59
- :authaction:`listIndexes`
60
60
- :authaction:`listCollections`
61
-
62
-
63
- .. include:: /includes/extracts/listDatabases-auth-4.0.6.rst
64
-
65
- .. include:: /includes/extracts/listDatabases-auth-4.0.5.rst
66
-
67
- .. include:: /includes/extracts/listDatabases-auth-4.0.0-4.0.4.rst
61
+
62
+ .. include:: /includes/listDatabases-auth
68
63
69
64
.. authrole:: readWrite
70
65
@@ -224,8 +219,6 @@ Cluster Administration Roles
224
219
225
220
.. authrole:: clusterManager
226
221
227
- .. versionchanged:: 3.4
228
-
229
222
.. include:: /includes/extracts/built-in-roles-clusterManager.rst
230
223
231
224
.. list-table::
@@ -246,7 +239,7 @@ Cluster Administration Roles
246
239
- :authaction:`cleanupOrphaned`
247
240
- :authaction:`flushRouterConfig`
248
241
- :authaction:`getDefaultRWConcern` (New in version 4.4)
249
- - :authaction:`listSessions` (New in version 3.6)
242
+ - :authaction:`listSessions`
250
243
- :authaction:`listShards`
251
244
- :authaction:`removeShard`
252
245
- :authaction:`replSetConfigure`
@@ -263,7 +256,7 @@ Cluster Administration Roles
263
256
- .. hlist::
264
257
:columns: 1
265
258
266
- - :authaction:`clearJumboFlag` (New in 4.2.3 and 4.0.15 )
259
+ - :authaction:`clearJumboFlag` (New in 4.2.3)
267
260
- :authaction:`enableSharding`
268
261
- :authaction:`refineCollectionShardKey` (New in 4.4)
269
262
- :authaction:`moveChunk`
@@ -372,16 +365,14 @@ Cluster Administration Roles
372
365
373
366
.. authrole:: clusterMonitor
374
367
375
- .. versionchanged:: 3.4
376
-
377
368
.. include:: /includes/extracts/built-in-roles-clusterMonitor.rst
378
369
379
370
Permits the following actions on the cluster as a whole:
380
371
381
372
.. hlist::
382
373
:columns: 2
383
374
384
- - :authaction:`checkFreeMonitoringStatus` (New in version 4.0)
375
+ - :authaction:`checkFreeMonitoringStatus`
385
376
- :authaction:`connPoolStats`
386
377
- :authaction:`getCmdLineOpts`
387
378
- :authaction:`getDefaultRWConcern` (New in version 4.4)
@@ -391,13 +382,13 @@ Cluster Administration Roles
391
382
- :authaction:`hostInfo`
392
383
- :authaction:`inprog`
393
384
- :authaction:`listDatabases`
394
- - :authaction:`listSessions` (New in version 3.6)
385
+ - :authaction:`listSessions`
395
386
- :authaction:`listShards`
396
387
- :authaction:`netstat`
397
388
- :authaction:`replSetGetConfig`
398
389
- :authaction:`replSetGetStatus`
399
390
- :authaction:`serverStatus`
400
- - :authaction:`setFreeMonitoring` (New in version 4.0)
391
+ - :authaction:`setFreeMonitoring`
401
392
- :authaction:`shardingState`
402
393
- :authaction:`top`
403
394
@@ -407,7 +398,7 @@ Cluster Administration Roles
407
398
- :authaction:`dbStats`
408
399
- :authaction:`getShardVersion`
409
400
- :authaction:`indexStats`
410
- - :authaction:`useUUID` (New in version 3.6)
401
+ - :authaction:`useUUID`
411
402
412
403
Permits the :authaction:`find` action on all :data:`system.profile
413
404
<<database>.system.profile>` collections in the cluster.
@@ -535,8 +526,8 @@ Cluster Administration Roles
535
526
- :authaction:`flushRouterConfig`
536
527
- :authaction:`fsync`
537
528
- :authaction:`invalidateUserCache`
538
- - :authaction:`killAnyCursor` (New in version 4.0)
539
- - :authaction:`killAnySession` (New in version 3.6)
529
+ - :authaction:`killAnyCursor`
530
+ - :authaction:`killAnySession`
540
531
- :authaction:`killop`
541
532
- :authaction:`logRotate`
542
533
- :authaction:`oidReset`
@@ -598,11 +589,11 @@ Backup and Restoration Roles
598
589
:data:`system.js <<database>.system.js>`, and
599
590
:data:`system.profile <<database>.system.profile>`
600
591
601
- - the :data:`admin.system.users` and :data:`admin.system.roles` collections
592
+ - The :data:`admin.system.users` and :data:`admin.system.roles` collections
602
593
603
- - the :data:`config.settings` collection
594
+ - The :data:`config.settings` collection
604
595
605
- - legacy ``system.users`` collections from versions of MongoDB prior to 2.6
596
+ - Legacy ``system.users`` collections from versions of MongoDB prior to 2.6
606
597
607
598
.. todo: Also provides the :authaction:`find` action on:
608
599
- system.new_users
@@ -727,21 +718,13 @@ All-Database Roles
727
718
728
719
.. include:: /includes/extracts/built-in-roles-readAnyDatabase.rst
729
720
730
- .. versionchanged:: 3.4
731
-
732
- .. include:: /includes/extracts/built-in-roles-readAnyDatabase-prior.rst
733
-
734
- .. include:: /includes/seealso-cluster-manager.rst
721
+ .. include:: /includes/seealso-cluster-manager.rst
735
722
736
723
.. authrole:: readWriteAnyDatabase
737
724
738
725
.. include:: /includes/extracts/built-in-roles-readWriteAnyDatabase.rst
739
726
740
- .. versionchanged:: 3.4
741
-
742
- .. include:: /includes/extracts/built-in-roles-readWriteAnyDatabase-prior.rst
743
-
744
- .. include:: /includes/seealso-cluster-manager.rst
727
+ .. include:: /includes/seealso-cluster-manager.rst
745
728
746
729
.. authrole:: userAdminAnyDatabase
747
730
@@ -754,7 +737,7 @@ All-Database Roles
754
737
- :authaction:`invalidateUserCache`
755
738
- :authaction:`listDatabases`
756
739
757
- The role also provides the following privilege actions on the
740
+ The role provides the following privilege actions on the
758
741
:data:`system.users <admin.system.users>` and
759
742
:data:`system.roles <admin.system.roles>` collections on the
760
743
``admin`` database, and on legacy ``system.users`` collections from
@@ -766,14 +749,8 @@ All-Database Roles
766
749
- :authaction:`find`
767
750
- :authaction:`killCursors`
768
751
- :authaction:`planCacheRead`
769
-
770
- .. versionchanged:: 2.6.4
771
- :authrole:`userAdminAnyDatabase` added the following privilege
772
- actions on the :data:`admin.system.users` and
773
- :data:`admin.system.roles` collections:
774
-
775
- - :authaction:`createIndex`
776
- - :authaction:`dropIndex`
752
+ - :authaction:`createIndex`
753
+ - :authaction:`dropIndex`
777
754
778
755
The :authrole:`userAdminAnyDatabase` role does not restrict the privileges
779
756
that a user can grant. As a result, :authrole:`userAdminAnyDatabase` users
@@ -782,22 +759,13 @@ All-Database Roles
782
759
role does not explicitly authorize privileges beyond user administration.
783
760
This role is effectively a MongoDB system :ref:`superuser <superuser>`.
784
761
785
- .. versionchanged:: 3.4
786
-
787
- :authrole:`userAdminAnyDatabase` no longer
788
- applies to the ``local`` and ``config`` databases.
789
-
790
- .. include:: /includes/seealso-cluster-manager.rst
762
+ .. include:: /includes/seealso-cluster-manager.rst
791
763
792
764
.. authrole:: dbAdminAnyDatabase
793
765
794
766
.. include:: /includes/extracts/built-in-roles-dbAdminAnyDatabase.rst
795
767
796
- .. versionchanged:: 3.4
797
-
798
- .. include:: /includes/extracts/built-in-roles-dbAdminAnyDatabase-prior.rst
799
-
800
- .. include:: /includes/seealso-cluster-manager.rst
768
+ .. include:: /includes/seealso-cluster-manager.rst
801
769
802
770
.. _superuser:
803
771
@@ -822,11 +790,6 @@ The following role provides full privileges on all resources:
822
790
823
791
.. include:: /includes/extracts/built-in-roles-root.rst
824
792
825
- .. versionchanged:: 3.4
826
-
827
- The :authrole:`root` role includes privileges from the
828
- :authrole:`backup` and :authrole:`restore` roles.
829
-
830
793
Internal Role
831
794
-------------
832
795
0 commit comments