Question

Hi I need some help writing a security code using python mongodb restful api. I just need help on how to provide a security login to user to enter their username and password or to have a block in using extra access once they have logined and they want more access to the databases they will be force to sign out of the server but I just do not know how to start on it can someone show me how to write a security code to allow users to enter a username and password or just block the user for accessing extra databases. Thank you

Also it should be in visual studios

I just need a way to write a code for security for my python mongodb project to let users when running the code to insert their username and password and it will block the user to have more access to the database after they enter their username and password it should make them only to use one database at a time and they cannot use extra access to use the databases I just need some kind of security using PYTHON MONGODB and Restful API

Answer 1

Hi,

MongoDB is a document oriented ,open source database program that is platform independent. MongoDB stores its data in documents using a JSON structure . This is what allows the data to be so flexible and not require a schema. MongoDB installation were left open to listen to any interface  thus anyone could connect to your database. So in order to provide security,adding authentication for your mongoDB database is necessary. This is an additional layer of security,if you leave your network interfaces open ,and want to ensure that there is additional security measure.

Adding authentication for your MongoDB means that for anyone connect to your database they will need to provide login and password to actually read and modify data.

Before you enable authentication on MongoDB ,it is suggested to create a root user account, so you could manage other users without the need to disable authentication.

# Enter Mongo console

mongo

# switch database to the admin database

use admin

# add your user with root permission

db.createUser({user:"admin",pwd:"secure_password",roles:[{role:"root",db:"admin"}]})

Next step is to connect to your database server and run

# Enter Mongo console

mongo

# Switch database to countly

use countly

# Add your user with read and write permission to this database

db,createUser({user:"test",pwd:"test123",roles: [{role:"readwrite",db:"countly"}]})

# Switch database to countlyfs

use countlyfs

# Add your user with database read and write permission to this database

db.createUser({user:"test", pwd:"test123", roles:[{role:"readwrite", db:"countly_fs"}]})

# switch database to countly_out

use countly_out

# add your user with read and write permission to this database

db.createUser({user:"test", pwd:"test123", roles[{role:"readwrite",db:"countly_out"}]})

Next step is to setup authentication information to countly,so it can connect to your database and use it properly.Here it is providing the encrypted password before saving it in configuration file .Now we need to modify 2 configuration files to provide credentials .The modification is given below:

mongodb: {

host: "localhost",

db:"countly",

port: give port

max_pool_size: give pool size

// providing user name

username:"test",

//providing encrypted password

password: enter encrypted password

// mongos :false ,

// only providing this ,if you are authenticating through other db

dboptions:{

// name of authentication db is admin

// only needed if you are using one user for all databases

authSource: "admin"

}

Hope you help this ..

Thank you...