Closed pboffino closed 7 years ago
I provided mongoaudit a user that had the "root" role and, since it wasn't dbAdmin or dbOwner, it told me it was ok, but the root role contains those 2
Hi @pboffino, thanks a lot for reporting. We just need to add root to the dangerous roles list as somehow we missed it.
root
I provided mongoaudit a user that had the "root" role and, since it wasn't dbAdmin or dbOwner, it told me it was ok, but the root role contains those 2