How to restrict a mongo user from dropping a collection?

Question

What would be the configuration/command for creating a role which can be applied to a user in MongoDB so that the user is unable to drop a collection?

Answer 1

Check the mongoDB documentation for creating user roles and privileges. http://docs.mongodb.org/manual/tutorial/manage-users-and-roles/

In general, for a non-admin role, only providing read access will prevent a user from dropping a collection. The code below is taken from the mongo docs and demonstrates access modifications for various collections.

use reporting
db.createUser(
    {
      user: "reportsUser",
      pwd: "12345678",
      roles: [
         { role: "read", db: "reporting" },
         { role: "read", db: "products" },
         { role: "read", db: "sales" },
         { role: "readWrite", db: "accounts" }
      ]
    }
)