SERVER-11474 connect auditLogging of revokeRolesFromUser and grantRol…

…esToUser
mongodb · Oct 30, 2013 · d8ed1f0 · d8ed1f0
1 parent 67defc7
commit d8ed1f0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/mongo/db/commands/user_management_commands.cpp b/src/mongo/db/commands/user_management_commands.cpp
@@ -867,6 +867,9 @@ namespace mongo {
                 userRoles.insert(roleName);
             }
 
+            audit::logGrantRolesToUser(ClientBasic::getCurrent(),
+                                       userName,
+                                       roles);
             BSONArray newRolesBSONArray = roleSetToBSONArray(userRoles);
             status = authzManager->updatePrivilegeDocument(
                     userName, BSON("$set" << BSON("roles" << newRolesBSONArray)), writeConcern);
@@ -979,6 +982,9 @@ namespace mongo {
                 userRoles.erase(roleName);
             }
 
+            audit::logRevokeRolesFromUser(ClientBasic::getCurrent(),
+                                          userName,
+                                          roles);
             BSONArray newRolesBSONArray = roleSetToBSONArray(userRoles);
             status = authzManager->updatePrivilegeDocument(
                     userName, BSON("$set" << BSON("roles" << newRolesBSONArray)), writeConcern);