Skip to content

Commit 97c2556

Browse files
committed
address comments
1 parent ac80a9c commit 97c2556

File tree

1 file changed

+16
-15
lines changed

1 file changed

+16
-15
lines changed

src/common/atlas/roles.ts

Lines changed: 16 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,32 +1,33 @@
11
import type { UserConfig } from "../config.js";
22
import type { DatabaseUserRole } from "./openapi.js";
33

4+
const readWriteRole: DatabaseUserRole = {
5+
roleName: "readWriteAnyDatabase",
6+
databaseName: "admin",
7+
};
8+
9+
const readOnlyRole: DatabaseUserRole = {
10+
roleName: "readAnyDatabase",
11+
databaseName: "admin",
12+
};
13+
414
/**
515
* Get the default role name for the database user based on the Atlas Admin API
616
* https://www.mongodb.com/docs/atlas/mongodb-users-roles-and-privileges/
717
*/
818
export function getDefaultRoleFromConfig(config: UserConfig): DatabaseUserRole {
919
if (config.readOnly) {
10-
return {
11-
roleName: "readAnyDatabase",
12-
databaseName: "admin",
13-
};
20+
return readOnlyRole;
1421
}
1522

1623
// If any of the write tools are enabled, use readWriteAnyDatabase
1724
if (
18-
!config.disabledTools?.includes("create") ||
19-
!config.disabledTools?.includes("update") ||
20-
!config.disabledTools?.includes("delete")
25+
!config.disabledTools.includes("create") ||
26+
!config.disabledTools.includes("update") ||
27+
!config.disabledTools.includes("delete")
2128
) {
22-
return {
23-
roleName: "readWriteAnyDatabase",
24-
databaseName: "admin",
25-
};
29+
return readWriteRole;
2630
}
2731

28-
return {
29-
roleName: "readAnyDatabase",
30-
databaseName: "admin",
31-
};
32+
return readOnlyRole;
3233
}

0 commit comments

Comments
 (0)