This role does not include full read access on non-system collections: Provides the following actions on all non-systemcollections. Previous versions only had the dropCollection action on the system.profile collection. dropCollection and createCollectionon system.profile onlyĬhanged in version 2.6.4: dbAdmin added the createCollectionaction for the system.profilecollection.Provides the following actions on thedatabase’s system.indexes, system.namespaces, and system.profile collections: This roledoes not grant privileges for user and role management. Provides the ability to perform administrative tasks such asschema-related tasks, indexing, and gathering statistics.The role provides the following actions on those collections:Įvery database includes the following database administration roles:
#MONGODB ROLE READWRITE PLUS#
Provides all the privileges of the read role plus ability tomodify data on all non-system collections and the system.js collection.If the user does not have the listDatabasesprivilege action, users can run the listDatabasescommand to return a list of databases for which the user has the find action privilege.If the user does not have the listDatabasesprivilege action, users can run the listDatabasescommand to return a list of databases for which the user has the find action privilege if the command is run with authorizedDatabases option unspecified or set to true.If the user does not have the listDatabasesprivilege action, users can run the listDatabasescommand to return a list of databases for which the user hasprivileges (including databases for which the user has privilegeson specific collections) if the command is run with authorizedDatabases option unspecified or set to true.The role provides read access by granting the following actions: Provides the ability to read data on all non-system collections and onthe following system collections: system.indexes, system.js, and system.namespaces collections.Database User RolesĮvery database includes the following client roles: You can alsoview the privileges for a built-in role at any time by issuing the rolesInfo command with the showPrivileges and showBuiltinRoles fields both set to true. This section describes the privileges for each built-in role. MongoDB provides all other built-in roles only on the admin database. MongoDB provides the built-in database user and database administration roles on every database. Agiven role applies to the database on which it is defined and can grant accessdown to a collection level of granularity.Įach of MongoDB’s built-in roles defines access at the database level for all non-system collections in the role’s database and at the collection levelfor all system collections. You can additionallycreate user-defined roles.Ī role grants privileges to perform sets of actions on defined resources. MongoDB grants access to data and commands through role-basedauthorization and provides built-in roles that provide the differentlevels of access commonly needed in a database system.
0 kommentar(er)
