Creating a database with authentication enabled on mongodb

Question

I can create a database using a specific role for my "user1". I have tested and a user "test1" can not create a database in the mode authorization enabled. How works the creation of the database? I created a user "user1" and it can access this database "db1" only. Can I have the same user "user1" with privileges to create a new database as exists in SQL Server? I might be (completeley) wrong, but I would like an explanation concrete about this case. Thank you for any help and instruction. :)

Answer 1

Really hard to understand your question.

Maybe your problem is this: In MongoDB you have different databases. Database admin, config and local are pre-defined system databases.

Users and roles are created in databases, I think that's a quite unique behavior for MongoDB. You can create users and roles in any database, however the admin database should be the common one.

The admin database includes roles for administering the whole system rather than just a single database. These roles are mainly related to replica set and sharded cluster administrative functions.

Roles which are created in other database than admin can only include privileges that apply to its database and can only inherit from other roles in its database.

A role created in the admin database can include privileges that apply to any database or to the cluster resource, and can inherit from roles in other databases as well as the admin database.

So, I assume user1 was not created in admin database. Most likely you created it test database, which is the default. Then above limitations apply.

Create user in admin database and grant required roles:

use admin
db.runCommand( {
       createUser: "user1",
       pwd: "secret",
       roles: [ "readWrite" ]
} )

or

db.getSiblingDB("admin").runCommand(...)

This user can create any database, and he can write into any database.

Every database provides built-In Roles read, readWrite, dbOwner, dbAdmin, userAdmin.

Maybe you are looking for this:

use admin
db.runCommand( {
       createUser: "user1",
       pwd: "secret",
       roles: [ { role: "dbOwner", db: "db1" } ]
} )

This commands creates the user and grant dbOwner of database db1. He can write into database db1, he cannot create or read any other database.