TMA-MONGODB-3.2
Ensure that role-based access control is enabled and configured appropriately
Mô tả
Role-based access control (RBAC) is a method of regulating access to resources based on the roles of individual users within an enterprise. A user is granted one or more roles that determine the user's access to database resources and operations. Outside of role assignments, the user has no access to the system. MongoDB can use RBAC to govern access to MongoDB systems.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.
Connect with mongosh as the user administrator and list users and roles (db.getUsers(), db.getRoles({showPrivileges: true}) in each database). Verify every user is assigned only the roles it needs and that privileges are granted through roles rather than individually.
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
1. Establish roles for MongoDB. 2. Assign the appropriate privileges to each role. 3. Assign the appropriate users to each role. 4. Remove any individual privileges assigned to users that are now addressed by the roles. 5. See the reference below for more Information.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- mongodbprivileges
- Tham chiếu
- CIS MongoDB 8 Benchmark v2.0.0 - 3.2 Ensure that role-based access control is enabled and configured appropriately