59 lines
1.5 KiB
Markdown
Executable File
59 lines
1.5 KiB
Markdown
Executable File
# config the root role of mongodb
|
||
refer to http://www.server110.com/mongodb/201705/89462.html
|
||
``` bash
|
||
$ mongo
|
||
> show dbs
|
||
> use admin
|
||
> db.createUser({
|
||
user: "root",
|
||
pwd: "123456",
|
||
roles: [ { role: "userAdminAnyDatabase", db: "admin" }]
|
||
}
|
||
)
|
||
db.auth('root', '123456')
|
||
db.createUser({
|
||
user: "light",
|
||
pwd: "123456",
|
||
roles: [ { role: "root", db: "admin" }]
|
||
}
|
||
)
|
||
# mongodb://light:123456@127.0.0.1:27017/
|
||
# mongodb://tester:xyz123@127.0.0.1:27017/test
|
||
use test
|
||
db.createUser(
|
||
{
|
||
user: "tester",
|
||
pwd: "xyz123",
|
||
roles: [ { role: "readWrite", db: "test" },
|
||
{ role: "read", db: "reporting" } ]
|
||
}
|
||
)
|
||
|
||
roles:
|
||
readWrite
|
||
read
|
||
|
||
readAnyDatabase 任何数据库的只读权限
|
||
|
||
readWriteAnyDatabase 任何数据库的读写权限
|
||
|
||
userAdminAnyDatabase 任何数据库用户的管理权限
|
||
dbAdminAnyDatabase 任何数据库的管理权限
|
||
```
|
||
|
||
# role
|
||
1. 数据库用户角色：read、readWrite;
|
||
2. 数据库管理角色：dbAdmin、dbOwner、userAdmin；
|
||
3. 集群管理角色：clusterAdmin、clusterManager、clusterMonitor、hostManager；
|
||
4. 备份恢复角色：backup、restore；
|
||
5. 所有数据库角色：readAnyDatabase、readWriteAnyDatabase、userAdminAnyDatabase、dbAdminAnyDatabase
|
||
6. 超级用户角色：root
|
||
// 这里还有几个角色间接或直接提供了系统超级用户的访问（dbOwner 、userAdmin、userAdminAnyDatabase）
|
||
7. 内部角色：__system
|
||
|
||
add this config into /etc/mongod.config
|
||
|
||
``` bash
|
||
security:
|
||
authorization: enabled
|
||
``` |