7 Commits

Author	SHA1	Message	Date
Spencer T Brody	ee7ea7ea7f	SERVER-6246 SERVER-9515 Update usersInfo and rolesInfo commands to new API	2013-10-06 17:19:23 -04:00
Spencer T Brody	1fde472858	SERVER-6246 SERVER-9515 Rename removeUser and removeRole commands to dropUser/dropRole	2013-10-06 12:02:45 -04:00
Andy Schwerin	3bc344db79	SERVER-1105 Update AuthorizationSession's logic for collection-level access control. ... Also requires changing the privileges of the built-in roles. This patch takes the opportunity to remove the 2.2-style read-only roles in favor of the 2.4-style "read" and "readAnyDatabase" roles, and renames the 2.2-style read-write roles "dbOwner" and "root". The "root" name, at least, is subject to change prior to the next unstable release. Test harnesses are updated as needed to use the correct builtin roles.	2013-09-26 14:33:43 -04:00
Spencer T Brody	ec23a4a358	SERVER-9517 Update tests to pass with new user schema	2013-09-06 12:31:22 -04:00
Spencer T Brody	211099e4bb	SERVER-6246 Restrict direct removes from system.users, add a shell helper to use the removeUser command, and update tests to use the helper	2013-08-01 14:12:09 -04:00
Spencer T Brody	b85f738ceb	SERVER-6246 Forbid direct inserts and updates to system.users collections when auth is enabled	2013-07-17 15:12:37 -04:00
Randolph Tan	5263d2a1a0	SERVER-9233 Add jstests for role-based access control	2013-04-09 10:50:22 -04:00