MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
An XCCDF Rule
Description
MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
- ID
- SV-265906r1028504_rule
- Version
- MD7X-00-000300
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Use the following statements to add and remove permissions on MongoDB server securables, bringing them into line with the documented requirements:
createRole(),
updateRole(),
dropRole(),
grantRolesToUser()