mongodb-security

{ "addShard": { "description": "Add a new shard", "tags": [ "cluster", "command", "sharding" ] }, "appendOplogNote": { "description": "User can append notes to the oplog.", "tags": [ "cluster", "replication" ] }, "applicationMessage": { "description": "User can perform the `logApplicationMessage` command.", "tags": [ "cluster", "command", "server" ], "level": 0 }, "authSchemaUpgrade": { "description": "User can perform the `authSchemaUpgrade` command.", "tags": [ "cluster", "command", "deployment" ] }, "changeCustomData": { "description": "Change the custom information of any user in the givenabase.", "tags": [ "auth" ] }, "changeOwnCustomData": { "description": "Update their own custom information", "tags": [ "auth" ] }, "changeOwnPassword": { "description": "Update their own passwords", "tags": [ "auth" ] }, "changePassword": { "description": "Update the password of any user", "tags": [ "auth" ] }, "cleanupOrphaned": { "description": "User can perform the `cleanupOrphaned` command.", "tags": [ "cluster", "command", "deployment" ] }, "closeAllDatabases": { "description": "User can perform the `closeAllDatabases` command.", "tags": [ "cluster", "command", "server" ] }, "collMod": { "description": "User can perform the `collMod` command.", "tags": [ "command", "server" ] }, "collStats": { "description": "View high-level collection statistics", "tags": [ "command", "diagnostic" ] }, "compact": { "description": "User can perform the `compact` command.", "tags": [ "command", "server" ] }, "connPoolStats": { "description": "User can perform the `connPoolStats` and `shardConnPoolStats`commands.", "tags": [ "cluster", "command", "diagnostic" ], "level": 0 }, "connPoolSync": { "description": "User can perform the `connPoolSync` command.", "tags": [ "cluster", "command", "server" ] }, "convertToCapped": { "description": "User can perform the `convertToCapped` command.", "tags": [ "command", "server" ] }, "cpuProfiler": { "description": "Enable and view profiling", "tags": [ "cluster", "deployment" ] }, "createCollection": { "description": "User can perform the `db.createCollection` method.", "tags": [ "crud" ] }, "createIndex": { "description": "Provides access to the `db.collection.createIndex` and the `createIndexes` command.", "tags": [ "command", "crud" ] }, "createRole": { "description": "User can create new roles in the given database.", "tags": [ "auth" ] }, "createUser": { "description": "User can create new users in the given database.", "tags": [ "auth" ] }, "cursorInfo": { "description": "User can perform the `cursorInfo` command.", "tags": [ "cluster", "command", "diagnostic" ] }, "dbHash": { "description": "User can perform the `dbHash` command.", "tags": [ "command", "diagnostic" ], "level": 0 }, "dbStats": { "description": "View high-level database statistics", "tags": [ "command", "diagnostic" ] }, "diagLogging": { "description": "User can perform the `diagLogging` command.", "tags": [ "cluster", "command", "diagnostic" ] }, "dropCollection": { "description": "User can perform the `db.collection.drop` method.", "tags": [ "crud" ], "level": 2 }, "dropDatabase": { "description": "User can perform the `dropDatabase` command.", "tags": [ "command", "server" ], "level": 2 }, "dropIndex": { "description": "User can perform the `dropIndexes` command.", "tags": [ "command", "server" ] }, "dropRole": { "description": "User can delete any role from the given database.", "tags": [ "auth" ] }, "dropUser": { "description": "User can remove any user from the given database.", "tags": [ "auth" ] }, "emptycapped": { "description": "User can perform the `emptycapped` command.", "tags": [ "command", "crud" ] }, "enableProfiler": { "description": "Enable profiling", "tags": [ "crud" ] }, "enableSharding": { "description": "Enable sharding", "tags": [ "cluster", "command", "sharding" ] }, "find": { "description": "Read documents", "tags": [ "read" ] }, "flushRouterConfig": { "description": "User can perform the `flushRouterConfig` command.", "tags": [ "cluster", "command", "sharding" ] }, "fsync": { "description": "User can perform the `fsync` command.", "tags": [ "cluster", "command", "server" ] }, "getCmdLineOpts": { "description": "User can perform the `getCmdLineOpts` command.", "tags": [ "cluster", "command", "diagnostic" ] }, "getLog": { "description": "User can perform the `getLog` command.", "tags": [ "cluster", "command", "diagnostic" ] }, "hostInfo": { "description": "View high-level server statistics", "tags": [ "cluster", "command", "diagnostic" ] }, "getParameter": { "description": "Provides information about the server the MongoDB instance runs on.", "tags": [ "cluster", "command", "server" ] }, "getShardMap": { "description": "User can perform the `getShardMap` command.", "tags": [ "cluster", "command", "sharding" ] }, "getShardVersion": { "description": "User can perform the `getShardVersion` command.", "tags": [ "command", "sharding" ] }, "grantRole": { "description": "Grant any role to any user", "tags": [ "auth" ] }, "indexStats": { "description": "View high-level index statistics", "tags": [ "command", "diagnostic" ] }, "inprog": { "description": "View pending and active operations", "tags": [ "cluster", "deployment" ] }, "insert": { "description": "Create documents", "tags": [ "command", "write" ] }, "invalidateUserCache": { "description": "Provides access to the `invalidateUserCache` command.", "tags": [ "cluster", "command", "deployment" ] }, "killCursors": { "description": "Allow language drivers to disconnect themselves.", "tags": [ "hidden", "crud" ], "level": 0 }, "killop": { "description": "User can perform the `db.killOp` method.", "tags": [ "cluster", "deployment" ] }, "listDatabases": { "description": "View all database names", "tags": [ "cluster", "command", "diagnostic" ] }, "listShards": { "description": "User can perform the `listShards` command.", "tags": [ "cluster", "command", "sharding" ] }, "logRotate": { "description": "User can perform the `logRotate` command.", "tags": [ "cluster", "command", "server" ] }, "moveChunk": { "description": "User can perform the `moveChunk` command.", "tags": [ "cluster", "command", "sharding" ] }, "netstat": { "description": "User can perform the `netstat` command.", "tags": [ "cluster", "command", "diagnostic" ], "level": 0 }, "planCacheRead": { "description": "User can perform the `planCacheListPlans` and `planCacheListQueryShapes` commands and the `PlanCache.getPlansByQuery` and `PlanCache.listQueryShapes` methods.", "tags": [ "command", "deployment" ], "level": 0 }, "planCacheWrite": { "description": "User can perform the `PlanCache.clear` and `PlanCache.clearPlansByQuery` commands", "tags": [ "command", "deployment" ] }, "reIndex": { "description": "Rebuild an index", "tags": [ "command", "server" ] }, "remove": { "description": "Delete a document", "tags": [ "write" ] }, "removeShard": { "description": "User can perform the `removeShard` command.", "tags": [ "cluster", "command", "sharding" ] }, "renameCollectionSameDB": { "description": "Allows the user to rename collections on the current database using the `renameCollection` command. Apply this action to database resources. Additionally, the user must either *have* :authaction:`find` on the source collection or *not have* :authaction:`find` on the - destination collection. If a collection with the new name already exists, the user must also have the :authaction:`dropCollection` action on the destination collection.", "tags": [ "command", "server" ] }, "repairDatabase": { "description": "User can perform the `repairDatabase` command.", "tags": [ "command", "server" ] }, "replSetConfigure": { "description": "Update replication configuration", "tags": [ "cluster", "replication" ] }, "replSetGetStatus": { "description": "View replication status", "tags": [ "cluster", "command", "replication" ] }, "replSetHeartbeat": { "description": "User can perform the `replSetHeartbeat` command.", "tags": [ "cluster", "command" ], "level": 0 }, "replSetStateChange": { "description": "User can change the state of a replica set through the `replSetFreeze`, `replSetMaintenance`, `replSetStepDown`, and `replSetSyncFrom` commands.", "tags": [ "cluster", "command", "replication" ] }, "resync": { "description": "Manually sync a secondary", "tags": [ "cluster", "command", "replication" ] }, "revokeRole": { "description": "User can remove any role from any user from any database in the system.", "tags": [ "auth" ] }, "serverStatus": { "description": "User can perform the `serverStatus` command.", "tags": [ "cluster", "command", "diagnostic" ] }, "setParameter": { "description": "User can perform the `setParameter` command.", "tags": [ "cluster", "command", "server" ] }, "shardingState": { "description": "User can perform the `shardingState` command.", "tags": [ "cluster", "command", "sharding" ] }, "shutdown": { "description": "User can perform the `shutdown` command.", "tags": [ "cluster", "command", "server" ] }, "splitChunk": { "description": "User can perform the `splitChunk` command.", "tags": [ "cluster", "command", "sharding" ] }, "splitVector": { "description": "User can perform the `splitVector` command.", "tags": [ "cluster", "command", "sharding" ] }, "storageDetails": { "description": "User can perform the `storageDetails` command.", "tags": [ "command", "deployment" ] }, "top": { "description": "User can perform the `top` command.", "tags": [ "cluster", "command", "diagnostic" ] }, "touch": { "description": "User can perform the `touch` command.", "tags": [ "cluster", "command", "server" ] }, "unlock": { "description": "User can perform the `db.fsyncUnlock` method.", "tags": [ "cluster", "crud" ] }, "update": { "description": "User can perform the `update` command.", "tags": [ "command", "write" ] }, "validate": { "description": "User can perform the `validate` command.", "tags": [ "command", "diagnostic" ] }, "viewRole": { "description": "User can view information about any role in the given database.", "tags": [ "auth" ] }, "viewUser": { "description": "User can view the information of any user in the given database.", "tags": [ "auth" ] } }