Why MongoDB security matters - See It in Action

Why MongoDB Security Matters

📖 Scenario: You are managing a small online store's database using MongoDB. You want to understand why securing your MongoDB database is important to protect your customers' data and your business.

🎯 Goal: Learn the basic reasons why MongoDB security matters by creating a simple collection and adding a security-related configuration.

📋 What You'll Learn

Create a MongoDB collection named customers with sample customer data

Add a configuration variable to represent a security setting

Write a query to find customers with a specific condition

Add a final security-related setting to complete the setup

💡 Why This Matters

🌍 Real World

Securing customer data in an online store database is critical to protect privacy and prevent unauthorized access.

💼 Career

Database administrators and developers must understand MongoDB security basics to keep data safe and comply with regulations.

1

Create the customers collection with sample data

Create a MongoDB collection called customers and insert these exact documents: { name: "Alice", email: "[e-mail]" } and { name: "Bob", email: "[e-mail]" }.

MongoDB

// Insert the customers documents into the collection
// Your code here

Need a hint?

Use db.collection.insertMany() to add multiple documents at once.

2

Add a security configuration variable

Create a variable called enableAuthentication and set it to true to represent enabling MongoDB authentication.

MongoDB

db.customers.insertMany([
  { name: "Alice", email: "[e-mail]" },
  { name: "Bob", email: "[e-mail]" }
])

// Set the authentication flag
// Your code here

Need a hint?

Use const to declare a variable that won't change.

3

Query customers with a specific email domain

Write a query using db.customers.find() to find all customers whose email ends with @example.com.

MongoDB

db.customers.insertMany([
  { name: "Alice", email: "[e-mail]" },
  { name: "Bob", email: "[e-mail]" }
])

const enableAuthentication = true;

// Find customers with emails ending in '@example.com'
// Your code here

Need a hint?

Use a regular expression in the query to match the email pattern.

4

Add a final security setting for access control

Add a variable called roleBasedAccessControl and set it to true to represent enabling role-based access control in MongoDB.

MongoDB

db.customers.insertMany([
  { name: "Alice", email: "[e-mail]" },
  { name: "Bob", email: "[e-mail]" }
])

const enableAuthentication = true;

const exampleCustomers = db.customers.find({ email: /@example\.com$/ });

// Enable role-based access control
// Your code here

Need a hint?

Use a boolean variable to represent enabling role-based access control.