Implementing MongoDB Security

1. Enabling Authentication

security:
  authorization: enabled

2. Creating User Accounts

db.createUser({
  user: "appUser",
  pwd: passwordPrompt(),
  roles: [{ role: "readWrite", db: "app" }]
});

3. Using Built-in Roles

4. Creating Custom Roles

db.createRole({
  role: "orderReader",
  privileges: [{ resource: { db:"app", collection:"orders" }, actions:["find"] }],
  roles: []
});

5. Granting Roles

6. Revoking Roles

7. Using SCRAM Authentication

8. Using x.509 Certificate Authentication

9. Using LDAP Authentication

10. Configuring Kerberos Authentication

11. Implementing Role-Based Access Control