File tree Expand file tree Collapse file tree 1 file changed +16
-15
lines changed
Expand file tree Collapse file tree 1 file changed +16
-15
lines changed Original file line number Diff line number Diff line change 11import type { UserConfig } from "../config.js" ;
22import type { DatabaseUserRole } from "./openapi.js" ;
33
4+ const readWriteRole : DatabaseUserRole = {
5+ roleName : "readWriteAnyDatabase" ,
6+ databaseName : "admin" ,
7+ } ;
8+
9+ const readOnlyRole : DatabaseUserRole = {
10+ roleName : "readAnyDatabase" ,
11+ databaseName : "admin" ,
12+ } ;
13+
414/**
515 * Get the default role name for the database user based on the Atlas Admin API
616 * https://www.mongodb.com/docs/atlas/mongodb-users-roles-and-privileges/
717 */
818export function getDefaultRoleFromConfig ( config : UserConfig ) : DatabaseUserRole {
919 if ( config . readOnly ) {
10- return {
11- roleName : "readAnyDatabase" ,
12- databaseName : "admin" ,
13- } ;
20+ return readOnlyRole ;
1421 }
1522
1623 // If any of the write tools are enabled, use readWriteAnyDatabase
1724 if (
18- ! config . disabledTools ? .includes ( "create" ) ||
19- ! config . disabledTools ? .includes ( "update" ) ||
20- ! config . disabledTools ? .includes ( "delete" )
25+ ! config . disabledTools . includes ( "create" ) ||
26+ ! config . disabledTools . includes ( "update" ) ||
27+ ! config . disabledTools . includes ( "delete" )
2128 ) {
22- return {
23- roleName : "readWriteAnyDatabase" ,
24- databaseName : "admin" ,
25- } ;
29+ return readWriteRole ;
2630 }
2731
28- return {
29- roleName : "readAnyDatabase" ,
30- databaseName : "admin" ,
31- } ;
32+ return readOnlyRole ;
3233}
You can’t perform that action at this time.
0 commit comments