monogdb操作system.*权限

mongodb roles

system.roles集合删不掉

当你自定义了特权(角色):
db.createRole({role: "dropSystemViewsAnyDatabase",privileges: [{actions: [ "dropCollection" ],resource: { db: "", collection: "system.roles" }}],roles: []}
)
// admin库下自动生成system.roles集合:
{"_id" : "admin.dropSystemViewsAnyDatabase","role" : "dropSystemViewsAnyDatabase","db" : "admin","privileges" : [ {"resource" : {"db" : "","collection" : "system.roles"},"actions" : [ "dropCollection"]}],"roles" : []
}// 然后期望配置该权限能删除system.roles集合,但是并没有用,不得而知
{"_id" : "admin.admin","userId" : UUID("198fe62e-8f36-421e-877e-4d73ca1a1fe4"),"user" : "admin","db" : "admin","credentials" : {"SCRAM-SHA-1" : {"iterationCount" : 10000,"salt" : "rmYnVC/Kc8U8jHJ8Xoa0AA==","storedKey" : "s2s+seXTlu5e/Et3RBMRjcT+1sc=","serverKey" : "qwEGx4vyIn6UHWXiPwDYVSAb9QA="},"SCRAM-SHA-256" : {"iterationCount" : 15000,"salt" : "UEJ8pbH7IU7HFyhjjQCn31h2OY5GjZ6SXONgjw==","storedKey" : "z6otQQpA4/SU5N6VJfuD3mm68kBH0z+5aKIexmgXaP4=","serverKey" : "MdeLFLQOh7gM93WrNioub9UjLSc8SREDQZskfT7wiYQ="}},"roles" : [ {"role" : "root", // 该权限可以读写除了system.*之外的所有"db" : "admin"}, {"role" : "__system", // 该权限可以读写system.*"db" : "admin"}, {"role" : "dropSystemViewsAnyDatabase",// 配置了自定义的权限,但是并没有用,不得而知"db" : "admin"}]
}