Question

I am using mongoVUE as mongo admin UI.
My mongo server is running with authentication enabled
I have created one test db (say test_db) and one user(test_user) in that db.
I have authorized test_db with test_user.
If i use mongo shell , than commands like “show db” ,”show collections ” in some db fails with authorization problem (this is fine and excepted).
But if use mongoVUE to login into mongo server using test_user. i am able to see all the db’s. i can access them ,i can modify them.
Do anyone know what is happening here ?

Answer 1

Users that are listed in the admin database have access to any other database, can do show dbs and show collections, without being explicitly added to any other database.