Browse files

SERVER-12035 Allow the clusterMonitor role to read local.system.replset

  • Loading branch information...
1 parent 26fd0b0 commit dfdfcefb7d0d7c484ffb6ca2519ec2e0272e25d7 @stbrody stbrody committed Jan 7, 2014
Showing with 5 additions and 0 deletions.
  1. +5 −0 src/mongo/db/auth/role_graph_builtin_roles.cpp
View
5 src/mongo/db/auth/role_graph_builtin_roles.cpp
@@ -413,6 +413,11 @@ namespace {
addReadOnlyDbPrivileges(privileges, "config");
Privilege::addPrivilegeToPrivilegeVector(
privileges,
+ Privilege(ResourcePattern::forExactNamespace(
+ NamespaceString("local.system.replset")),
+ ActionType::find));
+ Privilege::addPrivilegeToPrivilegeVector(
+ privileges,
Privilege(ResourcePattern::forCollectionName("system.profile"), ActionType::find));
}

0 comments on commit dfdfcef

Please sign in to comment.