Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <ul> <li>please give me a link.</li> </ul> <p>I did some security documentation a few months ago for MongoDB and it can be found <a href="http://docs.mongodb.org/manual/security" rel="nofollow">here</a>, this should be your starting point.</p> <ul> <li>As I understand from what I read, MongoDb does not support integrated security at all by default, it supposed to have its own user database with passwords, and no roles too, right? </li> </ul> <p>Up until MongoDB 2.2, authentication and authorisation is all local.In 2.2, there is limited RBAC (Role Based Access), i.e. two roles "read" and "write", with "write" being able to do everything on that database, i.e. admin.</p> <p>Things will change in 2.4 with new roles:</p> <pre><code>name description of privilege read ability to query data in any collection in the database, other than 'system.users', and also ability to run any command without an A or W attribute readWrite everything permitted by 'read' privilege, and also the ability to insert, update, or remove documents or indexes in any collection other than 'system.users', and also the ability to run any command without an A attribute userAdmin ability to read and write the 'system.users' collection dbAdmin ability to run admin commands affecting a single database; see list below serverAdmin ability to run admin commands affecting the entire database server; Can only be set on admin database; see discussion clusterAdmin admin commands for a cluster of shards or a replica set; Can only be set on admin database </code></pre> <p>as documented <a href="https://jira.mongodb.org/browse/SERVER-3198" rel="nofollow">here</a>. This enhanced RBAC will be available in all versions of MongoDB from 2.3.2 (development build) and the next production release, 2.4.0.</p> <p>With MongoDB 2.4, there will also be the ability to use Kerberos for authentication, however, this delegated authentication will only be available in the Enterprise builds, which require a Commercial Support contract for us.</p> <p>There is currently nothing within MongoDB that enforces password complexity but obviously in 2.4 with Kerberos, the KDC can do this. You will manually have to ensure (through your internal password policy etc) that users realise the issues of using non-complex passwords and re-using the same passwords on multiple devices. Assuming you are running 2.2, all logins, passwords and permissions for MongoDB access are stored in the system.users collection under each database. <a href="http://docs.mongodb.org/manual/tutorial/control-access-to-mongodb-with-authentication/" rel="nofollow">Here</a> is the exact link to the documentation that you should read. </p>
    singulars
    1. This table or related slice is empty.
    1. POIs there any way to use Linux integrated security for MongoDb?
      singulars
      1. PTQuestion
    1. PTAnswer
    1. This table or related slice is empty.
    1. USMark Hillick
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. POIs there any way to use Linux integrated security for MongoDb?
      singulars
      1. PTQuestion
    1. This table or related slice is empty.
    1. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTAcceptedByOriginator
    3. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    1. COIs Mongo 2.4 Release planned on Jan 31, 2013? That is when I can start using all this new features, right? Thanks
      singulars
      1. PO
      1. USYMC
    2. CO@YMC: The exact 2.4 release date depends on final testing & QA acceptance, but you can track the progress via [MongoDB Jira SERVER roadmap](https://jira.mongodb.org/browse/SERVER#selectedTab=com.atlassian.jira.plugin.system.project%3Aroadmap-panel) and release announcements in the [mongodb-announce google group](http://groups.google.com/group/mongodb-announce). The 2.3.2 development/unstable release should be out soon for testing, or you can download a [nightly build](http://www.mongodb.org/downloads) if you're really keen to preview/test the new security features.
      singulars
      1. PO
      1. USStennie
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload