DeployBoard / DeployBoard/deployboard-python

Add Access Controls to Mongo

未關閉
#24 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
database enhancement
主要語言
Python
星號
10
分支
1
PR 合併指標
30 天內沒有已合併 PR

描述

By default, Mongo comes with Access Controls disabled. We should enable them for the db container we provide in docker-compose. In a real production environment, users may be using something like MongoDB Atlas, or AWS's DocumentDB which would require some Access Control configuration on that end. In case users decide `docker-compose up` is just enough for their environment, we should provide some level of Access Control on the provided Mongo container for security and data integrity.

The current version of the db_seed.py script is really just for testing the database. We should probably rename that file to something like db_seed_dev.py and create a new db_seed.py file that would initialize the database with an account, a first user, and a database user that the application would use.

See this doc from Mongo for more information on Access Controls: https://docs.mongodb.com/manual/tutorial/enable-authentication/

貢獻指南

這個儲存庫沒有索引到貢獻指南

研究方向

先閱讀 docker-compose 和目前的 db_seed.py 腳本,然後查看 issue 中連結的 MongoDB 驗證文件。在修改之前,先確認提供的容器和 seed 腳本的使用方式。完成的標準是:開發容器已啟用存取控制,資料庫已使用所描述的帳戶和使用者完成初始化,且測試 seed 腳本已依要求分離。

由索引模型根據 Issue 內容生成。

評估

技術堆疊
docker-compose, mongodb, python
領域
database, devops, security
Issue 類型
功能
難度
4/5
預估耗時
3-5 天
活躍度
停滯
描述清晰度
基本清楚
新手友好度
38/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。