A detailed description of MongoDB user rights settings

Original address:http://blog.51yip.com/nosql/1575.html

I know that relational databases are privileged, what users can access what libraries, what tables, what users can insert, update, and some users have only Read permissions.

For example: MySQL installation configuration, there is a MySQL database, there is a user table, to store users, and user rights, and MongoDB this most like relational database, there is no such table.

First, grasp the authority, understand the following 4 is basically the same

1,mongodb is not the default administrator account, so you have to add the Administrator account, in the authorization authentication.

2, switch to the admin database, add the account is the Administrator account.

3, the user can only log in the user's database, including the administrator account.

4, the administrator can manage all the databases, but not directly manage the other databases, the admin database must be certified before you can. That's a bit odd.

Second, add admin account

View copy print?

2. [Email protected] zhangy]# MONGO
4. MongoDB Shell version:2.4.6
6. Connecting To:tank
8. > Use admin //Switch to admin database
10. Switched to DB admin
12. > Show Collections;
14. System.indexes
16. System.users //user table
18. > Db.system.users.find (); //user table no data
20. > Db.adduser (' tank ',' test '); //Add an Administrator account
22. {
24. "user": "Tank",
26. "ReadOnly": false,
28. "pwd": "988432606980d0695e4f668f6bbc643a",
30. "_id": ObjectId ("529e5d543b6a4608ac833429")
32. }

Third, open the user rights authentication

View copy print?

1. [[email protected] zhangy]# vim/etc/mongodb.conf //Remove the comments from the front of the Auth=true
2. [[email protected] zhangy]#/etc/init.d/mongod restart //restart effective

Four, users can only log in the user's database, administrators need to pass admin authentication to manage other databases

View copy print?

2. [Email protected] zhangy]# MONGO
4. MongoDB Shell version:2.4.6
6. Connecting To:tank
8. > Show DBS; //Show all databases failed because there is no authentication
10. Wed Dec 4 06:39:50.925 listdatabases failed:{ "OK": 0, "errmsg": "Unauthorized"} at Src/mongo/shell/mongo. js:46
12. > Db.auth (' tank ',' test '); //Authentication failed because this user does not belong to the tank database
14. error:18 {code:18, ok:0.0, errmsg: "auth fails"}
16. 0
18. > Use admin //Switch to admin database
20. Switched to DB admin
22. > Db.auth (' tank ',' test '); //Success in Admin database authentication
24. 1
26. > Use tank; //Switch to tank database
28. Switched to DB tank
30. > Show Collections; //Do not have permission at the prompt
32. Contact
34. System.indexes
36. Users

Five, add normal with the start

View copy print?

2. > Use tank;
4. Switched to DB tank
6. > Db.adduser (' Tank1 ',' test '); //Added a read-write user to the tank database Tank1
8. {
10. "_id": ObjectId ("529e5f8474b4c660718a70f3"),
12. "user": "Tank1",
14. "ReadOnly": false,
16. "pwd": "35DD47ABFF098F5B4F0B567DB8EDEAC5"
18. }
20. > Db.adduser (' tank2 ',' test ', true); //Added a read-only user to the tank database tank2
22. {
24. "user": "Tank2",
26. "ReadOnly": true,
28. "pwd": "1792916c544d247538ded52e6df7b887",
30. "_id": ObjectId ("529e67553992b24438d5e315")
32. }
34. > exit //Exit
36. Bye
38. [Email protected] zhangy]# MONGO
40. MongoDB Shell version:2.4.6
42. Connecting To:tank
44. > Db.auth (' Tank1 ',' test ');  //The user just added can log in.
46. 1

VI, PHP Client connection

1, recommended method one

View copy print?

2. $mongo = new MONGO ();
6. $db = $mongo->selectdb (' tank '); //Switch to tank database
10. $db->authenticate ("Tank3", "test"); //Certification
14. $users = $db->selectcollection ("users"); //Select Users table
18. $cursor = $users->find (); //Read Data
22. foreach ($cursor as $id = = $value) {
24. echo "$id:"; Print_r ($value);  echo "<br>";
26. }

This is a good way to understand, the root command line under the operation process is similar.

2, recommended method two

View copy print?

2. $mongo = new Mongo ("Mongodb://tank3:[email Protected]:27017/tank"); Authenticated Users, the database here, only the authentication function
6. $db = $mongo->selectdb (' tank '); //Select a database
10. $users = $db->selectcollection ("users");
14. $cursor = $users->find ();
18. foreach ($cursor as $id = = $value) {
20. echo "$id:"; Print_r ($value);  echo "<br>";
22. }

The difference between the above two methods is that a first select the database in the authentication, a first authentication in the selected database.

A detailed description of MongoDB user rights settings