MongoDB - 允许用户创建但不允许更新文档

Question

如何允许用户在 MongoDB 数据库中创建文档，但之后不更新它们？

Answer 1

您必须创建一个允许插入但不允许更新的用户定义角色，然后将该用户分配给它。请参阅下面的链接作为引用 A User-Defined Role Specifies Privileges

    {
  _id: "myApp.appUser",
  role: "appUser",
  db: "myApp",
  privileges: [
       { resource: { db: "myApp" , collection: "" },
         actions: [ "find", "createCollection", "dbStats", "collStats" ] },
       { resource: { db: "myApp", collection: "logs" },
         actions: [ "insert" ] },
       { resource: { db: "myApp", collection: "data" },
         actions: [ "insert", "update", "remove", "compact" ] },
       { resource: { db: "myApp", collection: "system.js" },
         actions: [ "find" ] },
  ],
  roles: []
}