Skip to content

Restrict explain to the master key #7519

Closed
#9890
Closed
Restrict explain to the master key#7519
#9890
Labels
bounty:$10Bounty applies for fixing this issue (Parse Bounty Program)state:releasedReleased as stable versionstate:released-alphaReleased as alpha versiontype:featureNew feature or improvement of existing feature

Description

@mstniy
mstniy
opened on Aug 24, 2021

New Feature / Enhancement Checklist

Current Limitation

Currently, any user is able to run a query with the explain parameter and obtain the raw result returned by MongoDB. This discloses too much information to the clients, nor is it of great utility to them.

Feature / Enhancement Description

The use of the explain parameter should be restricted to the master key. We can use the deprecator to shift to the new behavior gradually.

Example Use Case

n/a

Alternatives / Workarounds

n/a

3rd Party References

n/a

Activity

  1. mtrezza commented on Aug 24, 2021

    @mtrezza
    mtrezza
    on Aug 24, 2021
    Member

    Thanks for opening this issue!

    Makes sense to me, would you want to open a PR for this?

  2. mtrezza
    added
    🧬 enhancement
    on Aug 24, 2021
  3. mtrezza
    added
    bounty:$10Bounty applies for fixing this issue (Parse Bounty Program)
    on Oct 7, 2021
  4. mtrezza
    added
    type:featureNew feature or improvement of existing feature
    and removed
    type:improvement
    on Dec 6, 2021
  5. mtrezza
    closed this as completedin #9890on Nov 8, 2025

  6. parseplatformorg commented on Nov 8, 2025

    @parseplatformorg
    parseplatformorg
    on Nov 8, 2025
    Contributor

    🎉 This change has been released in version 8.5.0-alpha.5

  7. parseplatformorg
    added
    state:released-alphaReleased as alpha version
    on Nov 8, 2025

  8. parseplatformorg commented on Dec 1, 2025

    @parseplatformorg
    parseplatformorg
    on Dec 1, 2025
    Contributor

    🎉 This change has been released in version 8.5.0

  9. parseplatformorg
    added
    state:releasedReleased as stable version
    on Dec 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bounty:$10Bounty applies for fixing this issue (Parse Bounty Program)state:releasedReleased as stable versionstate:released-alphaReleased as alpha versiontype:featureNew feature or improvement of existing feature

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions