MongoDB — Security

Authentication

// Enable authentication
// In mongod.conf:
// security.authorization: enabled

// Create admin user
use admin
db.createUser({
  user: "admin",
  pwd: "password",
  roles: ["root"]
})

Authorization Roles

Role	Description
read	Read data
readWrite	Read and write
dbAdmin	Database admin
userAdmin	User management
root	Full access

Create User

use mydb
db.createUser({
  user: "appuser",
  pwd: "password",
  roles: [{ role: "readWrite", db: "mydb" }]
})

Connect with Auth

mongo -u admin -p password --authenticationDatabase admin

TLS/SSL

# mongod.conf
net:
  tls:
    mode: requireTLS
    certificateKeyFile: /path/to/server.pem

Security Checklist

Practice	Description
Enable auth	Require authentication
Use TLS	Encrypt connections
Limit network	Bind to specific IP
Audit logging	Track operations
Regular updates	Patch vulnerabilities

Mini Practice

1. Enable authentication
2. Create users
3. Assign roles
4. Connect with auth

Up Next

Continue with Users — user management.