Authorization comes before validation

What changes in Authorization comes before validation compared with MongoDB and what your application has to do.

This difference is of the Stronger guarantee kind.

What MongoDB does

It validates the shape of the command before checking privileges.

What TeselaDB does

A user without the privilege gets Unauthorized before the fields of the command are read.

What your application has to do

Nothing. A user without permissions learns nothing from the command it sends.

See also