mongodb用户权限管理-001
创建自定义用户:
1.添加用于全局管理的角色:
db.createUser(
{
user: "root",
pwd: "password",
roles: [{"role":"root","db":"admin"}]
}
)
2.添加管理某一数据库的角色,可以根据需要为其添加权限,也可以之后根据需求添加权限给他:
db.createUser(
{
user: "username",
pwd: "password",
roles: [{"role":"readWrite","db":"mydb"}]
"read"
}
)
用户username现在具有读写mydb数据和读其他数据库的权限。
3.启用认证:
编辑mongod.conf文件为:
# mongod.conf
# for documentation of all options, see:
# http://docs.mongodb.org/manual/reference/configuration-options/
# Where and how to store data.
storage:
dbPath: /var/lib/mongodb
journal:
enabled: true
# engine:
# mmapv1:
# wiredTiger:
# where to write logging data.
systemLog:
destination: file
logAppend: true
path: /var/log/mong
