mongodb-security/res/user.json

Portable business logic of MongoDB security model

{
	"_id" : "reporting.reportsUser",
	"user" : "reportsUser",
	"db" : "reporting",
	"roles" : [
		{
			"role" : "read",
			"db" : "reporting"
		},
		{
			"role" : "read",
			"db" : "products"
		},
		{
			"role" : "read",
			"db" : "sales"
		},
		{
			"role" : "readWrite",
			"db" : "accounts"
		}
	],
	"inheritedRoles" : [
		{
			"role" : "readWrite",
			"db" : "accounts"
		},
		{
			"role" : "read",
			"db" : "sales"
		},
		{
			"role" : "read",
			"db" : "products"
		},
		{
			"role" : "read",
			"db" : "reporting"
		}
	],
	"inheritedPrivileges" : [
		{
			"resource" : {
				"db" : "reporting",
				"collection" : ""
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"anyResource" : true
			},
			"actions" : [
				"listCollections"
			]
		},
		{
			"resource" : {
				"db" : "reporting",
				"collection" : "system.indexes"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "reporting",
				"collection" : "system.js"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "reporting",
				"collection" : "system.namespaces"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "products",
				"collection" : ""
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "products",
				"collection" : "system.indexes"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "products",
				"collection" : "system.js"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "products",
				"collection" : "system.namespaces"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "sales",
				"collection" : ""
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "sales",
				"collection" : "system.indexes"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "sales",
				"collection" : "system.js"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "sales",
				"collection" : "system.namespaces"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "accounts",
				"collection" : ""
			},
			"actions" : [
				"collStats",
				"convertToCapped",
				"createCollection",
				"createIndex",
				"dbHash",
				"dbStats",
				"dropCollection",
				"dropIndex",
				"emptycapped",
				"find",
				"insert",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead",
				"remove",
				"renameCollectionSameDB",
				"update"
			]
		},
		{
			"resource" : {
				"db" : "accounts",
				"collection" : "system.indexes"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		},
		{
			"resource" : {
				"db" : "accounts",
				"collection" : "system.js"
			},
			"actions" : [
				"collStats",
				"convertToCapped",
				"createCollection",
				"createIndex",
				"dbHash",
				"dbStats",
				"dropCollection",
				"dropIndex",
				"emptycapped",
				"find",
				"insert",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead",
				"remove",
				"renameCollectionSameDB",
				"update"
			]
		},
		{
			"resource" : {
				"db" : "accounts",
				"collection" : "system.namespaces"
			},
			"actions" : [
				"collStats",
				"dbHash",
				"dbStats",
				"find",
				"killCursors",
				"listCollections",
				"listIndexes",
				"planCacheRead"
			]
		}
	]
}