DeployBoard / DeployBoard/deployboard-python
Add Access Controls to Mongo
- 主要語言
- Python
- 星號
- 10
- 分支
- 1
- PR 合併指標
- 30 天內沒有已合併 PR
描述
By default, Mongo comes with Access Controls disabled. We should enable them for the db container we provide in docker-compose. In a real production environment, users may be using something like MongoDB Atlas, or AWS's DocumentDB which would require some Access Control configuration on that end. In case users decide `docker-compose up` is just enough for their environment, we should provide some level of Access Control on the provided Mongo container for security and data integrity.
The current version of the db_seed.py script is really just for testing the database. We should probably rename that file to something like db_seed_dev.py and create a new db_seed.py file that would initialize the database with an account, a first user, and a database user that the application would use.
See this doc from Mongo for more information on Access Controls: https://docs.mongodb.com/manual/tutorial/enable-authentication/
貢獻指南
這個儲存庫沒有索引到貢獻指南
研究方向
先閱讀 docker-compose 和目前的 db_seed.py 腳本,然後查看 issue 中連結的 MongoDB 驗證文件。在修改之前,先確認提供的容器和 seed 腳本的使用方式。完成的標準是:開發容器已啟用存取控制,資料庫已使用所描述的帳戶和使用者完成初始化,且測試 seed 腳本已依要求分離。
由索引模型根據 Issue 內容生成。
評估
- 技術堆疊
- docker-compose, mongodb, python
- 領域
- database, devops, security
- Issue 類型
- 功能
- 難度
- 4/5
- 預估耗時
- 3-5 天
- 活躍度
- 停滯
- 描述清晰度
- 基本清楚
- 新手友好度
- 38/100