MongoDB adds permission management

Foreword:

With the maturity of the columnar storage concept, more and more developers have begun to accept large-scale distributed columnar databases such as mongodb and hbase.In particular, the rapid construction and use of mongodb makes it more popular.I mainly do a test and practice for mongodb permission configuration through the official website instructions.

step1: start mongod service without authentication

mongod --port 27017 --dbpath /data/db1

step2: Client mongo connect without password and set super user (for admin login)

mongo --port 27017

use admindb.createUser( { { user: "myUserAdmin", pwd: "abc123", roles: [ { role: "userAdminAnyDatabase", db: "admin" } ] })

step3: start the mongod service with verification

mongod --auth --port 27017 --dbpath /data/db1

step4: After the administrator mongo logs in, add a user and assign permissions

mongo --port 27017 -u "myUserAdmin" -p "abc123" --authenticationDatabase "admin"

use testdb.createUser( { { user: "myTester", pwd: "xyz123", roles: [ { role: "readWrite", db: "test" }, { role: "read", db: "reporting"} ] })

step5: Authorize user to log in and operate form

mongo --port 27017 -u "myTester" -p "xyz123" --authenticationDatabase "test"

db.foo.insert( { x: 1, y: 1 } )

Note: When accessing without permission, the following error will be reported

Reference:

https://docs.mongodb.com/v3.2/tutorial/enable-authentication/

Afterword:

The above is only for simple management of mongodb, and it will not be directly connected to the port by the outside world.But for more systematic permission management, please refer to the official website description

https://docs.mongodb.com/v3.2/tutorial/manage-users-and-roles/