To the best of my knowledge, there is not yet any built in way (as of version 2.4) to provide access-control at the collection level. Mongo's ACLs go to the Database only. Do do what you want you will have to move that users collection to a different database.
sysadmin1138
- 825
- 5
- 10