DOCS-2238 add grantRolestoRole method

bin/builddata/htaccess.yaml

@@ -3275,4 +3275,12 @@ code: 301
 outputs:
   - 'master'
   - 'manual'
+---
+redirect-path: '/reference/method/db.grantRolesToRole'
+url-base: '/reference/security'
+type: 'redirect'
+code: 301
+outputs:
+  - 'manual'
+  - 'before-v2.4'
 ...

source/includes/access-revoke-role-from-user.rst → source/includes/access-revoke-roles.rst

@@ -1,2 +1,2 @@
 Only users with access that includes the :authaction:`revokeRole` action on
-a database can revoke a role from that database.
+a database can revoke a role on that database.

source/includes/ref-toc-method-role-management.yaml

@@ -28,10 +28,10 @@
 # description: |
 #   Removes the specified privileges from a user-defined role.
 # ---
-# name: :method:`db.grantRolesToRole()`
-# file: /reference/method/db.grantRolesToRole
-# description: |
-#   Specifies roles from which a user-defined role inherits privileges.
+name: :method:`db.grantRolesToRole()`
+file: /reference/method/db.grantRolesToRole
+description: |
+  Specifies roles from which a user-defined role inherits privileges.
 # ---
 # name: :method:`db.revokeRolesFromRole()`
 # file: /reference/method/db.revokeRolesFromRole
@@ -47,4 +47,4 @@
 # file: /reference/method/db.getRoles
 # description: |
 #   Returns information for all the user-defined roles in a database.
-#...
+...

source/reference/command/grantRolesToRole.txt

@@ -9,8 +9,7 @@ Definition
 
 .. dbcommand:: grantRolesToRole
 
-   Add additional roles to a :ref:`user-defined <user-defined-roles>`
-   role.
+   Grants roles to a :ref:`user-defined role <user-defined-roles>`.
 
    The :dbcommand:`grantRolesToRole` command affects roles on the
    database where the command runs. :dbcommand:`grantRolesToRole` has
@@ -36,8 +35,7 @@ Definition
 Required Access
 ---------------
 
-To grant a role, a user must have access that includes the
-:authaction:`grantRole` action on the relevant database.
+.. include:: /includes/access-grant-roles.rst
 
 Example
 -------

source/reference/command/grantRolesToUser.txt

@@ -31,7 +31,7 @@ Definition
 Required Access
 ---------------
 
-.. include:: /includes/access-grant-role-to-user.rst
+.. include:: /includes/access-grant-roles.rst
 
 Example
 -------

source/reference/command/revokeRolesFromUser.txt

@@ -33,7 +33,7 @@ Definition
 Required Access
 ---------------
 
-.. include:: /includes/access-revoke-role-from-user.rst
+.. include:: /includes/access-revoke-roles.rst
 
 Example
 -------

source/reference/method/db.grantRolesToUser-param.yaml

@@ -0,0 +1,20 @@
+object:
+  name: db.grantRolesToRole
+  type: method
+field:
+  optional: false
+  type: param
+name: rolename
+type: string
+position: 1
+description: |
+  The name of the role to which to grant sub roles.
+---
+file: /reference/command/grantRolesToRole-field.yaml
+name: roles
+position: 2
+---
+file: /reference/command/grantRolesToRole-field.yaml
+name: writeConcern
+position: 3
+...

source/reference/method/db.grantRolesToUser.txt

@@ -0,0 +1,49 @@
+=====================
+db.grantRolesToRole()
+=====================
+
+.. default-domain:: mongodb
+
+Definition
+----------
+
+.. method:: db.grantRolesToRole ( rolename, roles, writeConcern )
+
+   Grants roles to a :ref:`user-defined role <user-defined-roles>`.
+
+   The :method:`grantRolesToRole` method uses the following syntax:
+
+   .. code-block:: javascript
+
+      db.grantRolesToRole( "<rolename>", [<roles>], {writeConcern} )
+
+   The :method:`grantRolesToRole` method takes the following arguments:
+
+   .. include:: /reference/method/db.grantRolesToRole-param.rst
+
+   .. |local-cmd-name| replace:: :method:`db.grantRolesToRole()`
+   .. include:: /includes/fact-roles-array-contents.rst
+
+   The :method:`db.grantRolesToRole()` method wraps the
+   :dbcommand:`grantRolesToRole` command.
+
+Required Access
+---------------
+
+.. include:: /includes/access-grant-roles.rst
+
+Example
+-------
+
+.. TODO Update this example
+
+The following :method:`grantRolesToRole()` operation updates the
+``productsReaderWriter`` role to inherit the privileges of
+``productsReader``:
+
+.. code-block:: javascript
+
+   db.grantRolesToRole( "productsReaderWriter",
+                        [ "productsReader" ],
+                        { w: "majority" , wtimeout: 5000 }
+                      )

source/tutorial/change-user-privileges.txt

@@ -21,9 +21,9 @@ For an overview of roles and privileges, see :ref:`authorization`.
 Prerequisites
 -------------
 
-.. include:: /includes/access-grant-role-to-user.rst
+.. include:: /includes/access-grant-roles.rst
 
-.. include:: /includes/access-revoke-role-from-user.rst
+.. include:: /includes/access-revoke-roles.rst
 
 Procedure
 ---------