MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
An XCCDF Rule
Description
MongoDB must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
- ID
- SV-252150r879530_rule
- Version
- MD4X-00-001700
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Use
createRole(),
updateRole(),
dropRole(),
grantRole() statements
to add and remove permissions on MongoDB serverl securables, bringing them into line with the documented requirements.