@@ -26,15 +26,17 @@ Pre-production Checklist/Considerations
2626 requires that all clients and servers provide valid credentials
2727 before they can connect to the system.
2828
29- See also:
29+ |
3030
31- - :doc:`/core/authentication`
32- - :doc:`/tutorial/enable-authentication`
31+ See also:
32+
33+ - :doc:`/core/authentication`
34+ - :doc:`/tutorial/enable-authentication`
3335
3436.. _security-checklist-role-based-access-control:
3537
36- Configure Role-Based Access Control
37- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
38+ |arrow| Configure Role-Based Access Control
39+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
3840
3941- Create a user administrator **first**, then create additional
4042 users. Create a unique MongoDB user for each person/application
@@ -45,16 +47,19 @@ Configure Role-Based Access Control
4547 users and assign them only the roles they need to perform their
4648 operations. A user can be a person or a client application.
4749
48- Note that a user can have privileges across different databases. If a
49- user requires privileges on multiple databases, create a
50- single user with roles that grant applicable database
51- privileges instead of creating the user multiple times in
52- different databases.
50+ .. note::
51+
52+ A user can have privileges across different databases. If a user
53+ requires privileges on multiple databases, create a single user
54+ with roles that grant applicable database privileges instead of
55+ creating the user multiple times in different databases.
56+
57+ |
5358
54- See also:
59+ See also:
5560
56- - :doc:`/core/authorization`
57- - :doc:`/tutorial/manage-users-and-roles`
61+ - :doc:`/core/authorization`
62+ - :doc:`/tutorial/manage-users-and-roles`
5863
5964|arrow| Encrypt Communication (TLS/SSL)
6065~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -71,7 +76,9 @@ See also:
7176
7277 .. include:: /includes/fact-tls-1.0.rst
7378
74- See also: :doc:`/tutorial/configure-ssl`.
79+ |
80+
81+ See also: :doc:`/tutorial/configure-ssl`.
7582
7683.. |binary| replace:: MongoDB
7784
@@ -108,19 +115,21 @@ See also: :doc:`/tutorial/configure-ssl`.
108115
109116 .. include:: /includes/fact-default-bind-ip-change.rst
110117
111- See also:
118+ |
112119
113- - :doc:`/core/security-hardening`
120+ See also:
114121
115- - the :setting:`net.bindIp` configuration setting
116-
117- - the :setting:`security.clusterIpSourceWhitelist` configuration
118- setting
122+ - :doc:`/core/security-hardening`
119123
120- - the :ref:`authenticationRestrictions
121- <db-createUser-authenticationRestrictions>` field to the
122- :dbcommand:`db.createUser()` command to specify a per-user IP
123- whitelist.
124+ - the :setting:`net.bindIp` configuration setting
125+
126+ - the :setting:`security.clusterIpSourceWhitelist` configuration
127+ setting
128+
129+ - the :ref:`authenticationRestrictions
130+ <db-createUser-authenticationRestrictions>` field to the
131+ :method:`db.createUser()` command to specify a per-user IP
132+ whitelist.
124133
125134
126135|arrow| Audit System Activity
@@ -136,11 +145,13 @@ See also:
136145 up filters to record specific events, such as authentication
137146 events.
138147
139- See also:
148+ |
149+
150+ See also:
140151
141- - :doc:`/core/auditing`
152+ - :doc:`/core/auditing`
142153
143- - :doc:`/tutorial/configure-auditing`
154+ - :doc:`/tutorial/configure-auditing`
144155
145156|arrow| Run MongoDB with a Dedicated User
146157~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -149,7 +160,9 @@ See also:
149160 account. Ensure that the account has permissions to access data
150161 but no unnecessary permissions.
151162
152- See also: :doc:`/installation`
163+ |
164+
165+ See also: :doc:`/installation`
153166
154167.. _security-checklist-javascript:
155168
@@ -168,7 +181,9 @@ See also: :doc:`/installation`
168181 This ensures that all documents stored by the
169182 :binary:`~bin.mongod` instance are valid :term:`BSON`.
170183
171- See also: :doc:`/core/security-hardening`
184+ |
185+
186+ See also: :doc:`/core/security-hardening`
172187
173188|arrow| Request a Security Technical Implementation Guide (where applicable)
174189~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
0 commit comments