SoftInstigate / restheart

Rapid API Development with MongoDB
https://restheart.org
GNU Affero General Public License v3.0
807 stars 171 forks source link

Adding DB users #37

Closed bogdancioroianu closed 9 years ago

bogdancioroianu commented 9 years ago

Hi, I am trying to add new MongoDB users using the REST interface but I couldn't make it work and I always receive a Forbidden message with the "reserved resource" description. I am using a high privilege Mongo user into the restheart.yml to connect to the DB.

Is there anyway to make this work/available?

Thanks, Bogdan

ujibang commented 9 years ago

Hi Bodgan,

as a security restriction, system tables cannot be accessed from restheart: you cannot create db users from restheart, this is supposed to be done at configuration time.

restheart uses its own identity and access managers to allow users accessing dbs, collections and documents. have a look at http://restheart.org/docs/security.html for more information.

bogdancioroianu commented 9 years ago

Thanks