Skip to main content

How to create users in MongoDB

Assuming you've already completed the basic setup process mentioned in this blog. In this example, we'll see how we can create admin user and enable authorization.

Connect to admin database

On a cmd window, connect to MongoDB by hitting command "mongo". By default, it connects to "test" database.
Once connection is successful, switch to admin db

#mongo
#use admin

Create Role

After switching to admin db, create executiveFunction role
db.runCommand({ createRole: "executeFunctions",
  privileges: [
    { resource: { anyResource: true }, actions: [ "anyAction" ]  }
  ],
  roles: [],
  writeConcern: { w: "majority" , wtimeout: 5000 }
});

Create admin user

In this step, we'll create admin user mongoadmin with password mongo123
db.runCommand( 
    { 
        "createUser" : "mongoadmin", 
        "pwd": "mongo123", 
        "customData" : 
                {"description": "mongo admin user" }, 
                "roles" : 
                    [ 
                        {
                            "role" : "executeFunctions",
                            "db" : "admin"
                        }, 
                        "root"
                    ] 
    },
    { 
        w: "majority",
        wtimeout: 5000
    } 
);

Create readonly user

For guest access on your database, you may want to create readonly users as well. In this example below, we are creating role "readonly" with "read" access on database "mydb"
#switch to mydb    
use mydb
    db.grantRolesToUser(
        "readonly",
        [
          { role: "read", db: "mydb" }
        ]
    )

Now let's create a user "mongoread" with password "read0nly" on db "mydb"
db.runCommand( 
    { 
        "createUser" : "mongoread", 
        "pwd": "read0nly", 
        "customData" : { "description": "mongo readonly user" }, 
        "roles" : 
            [ 
                {
                    "role" : "read",
                    "db" : "mydb"
                }
            ] 
    },
    { w: "majority" , wtimeout: 5000 } 
);

Enable security on your database

Now, you're all set to enable security on your database. Open mongod.conf and change the value of security.authorizationEnabled attribute to "enabled"
systemLog:
    destination: file
    path: M:\mongodb\data\log\mongod.log
storage:
    dbPath: M:\mongodb\data\db
net:
    bindIp: 127.0.0.1
security:
    authorization: enabled
Remove mongod service to install the service again with new parameters
mongod --remove

Reinstall the service
mongod --config "M:\mongodb\conf\mongod.cfg" --serviceName "MongoDB" --serviceDisplayName "MongoDB" --serviceDescription "MongoDB Server Instance" --install

That's all!

Comments

Popular posts from this blog

MongoDB BulkWrite Java API

Since version 3.2, MongoDB has introduced Bulk Update methods. In context of RDBMS, it's like SQL Batch Jobs, where SQL Statements are prepared in different chunks and a batch of statements are submitted to DB for update/insert. Here are some important points about MongoDB Bulk Write operation.. Useful in case you've huge data to update/insert. Mongo automatically prepares batches (of 1000 default) and start execution in an ordered/unordered manner. This drastically reduce DB trip time. Let's say there are 50 thousand records to update, now instead of 50k round trips to DB from your app server, using Bulk Update it would be reduced to just 50 round trips. Let's see an example below: List<WriteModel<Document>> updateDocuments = new ArrayList<WriteModel<Document>>(); for ( Long entityId : entityIDs ) { //Finder doc Document filterDocument = new Document (); filterDocument . append ( "_id" , ent

MongoDB fetch operation using Java API

With changes in MongoDB, there has been several changes in its Java API as well. There are now some good and easy way to perform different operation with DB. MongoDB Java API is really very simple and easy to understand. If we understand the basics, we can build up simple to complex queries. Let's take a look at the example of MongoDB fetch operation using the new Java API and then we'll try to understand the basics.. public MyEntity findMyEntityById ( long entityId ) { List < Bson > queryFilters = new ArrayList <>(); queryFilters . add ( Filters . eq ( "_id" , entityId )); Bson searchFilter = Filters . and ( queryFilters ); //Fields to return. //_id is available by default. A value of "0" would skip it List < Bson > returnFilters = new ArrayList <>(); returnFilters . add ( Filters . eq ( "name" , 1 )); returnFilters . add ( Filters . eq ( "_id" , 0 ))

MongoDB Aggregation using Java API

A very common problem scenario in programming is to get the records or record count by certain fields. For developers familiar with RDBMS, it's like creating a SQL with combination of count function and group by attributes. For MongoDB too, it's very similar. Let's look at the example below fetching no of employees group by department Ids. public Map < Long , Integer > getEmployeeCountMapByDeptId () { Map < Long , Integer > empCountMap = new HashMap <>(); AggregateIterable < Document > iterable = getMongoCollection (). aggregate ( Arrays . asList ( new Document ( "$match" , new Document ( "active" , Boolean . TRUE ) . append ( "region" , "India" )), new Document ( "$group" , new Document ( "_id" , "$" + "deptId" ). append ( "count"