Security, IAM, and Compliance

Showing 101

Ability to invalidate or revoke a X.509 certificate that was not expired.

Currently, X.509 certificates can be issued for authentication and authorization. However, it is not possible to invalidate an already issued certificate. In a situation where the certificate would be compromised, it is therefore not possible to i...

Geoffrey Céré about 5 years ago in Atlas (Control Plane and Data Plane RBAC) 5 Submitted

10 VOTE

User permissions

1. Each Organisation-Member is able to read the billing details of the organisation. This should be restricted. We facing problems with our governance, because each member is able to get details about billing in MongoDB Atlas. 2. As an Project-Own...

Guest about 6 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

3 VOTE

user authentication

Hy It would be extremely useful to be able to create users who can only connect to the database from specific networks or even specific IP addresses, similar to what is possible with MySQL. For example, using the following commands: CREATE USE...

Guest almost 2 years ago in Security, IAM, and Compliance 2 Submitted

7 VOTE

make empty teams possible

It is currently not possible to create empty teams of remove all users from teams. We would like to arrange our access management through teams. For our production environment we want a 'read only' and an 'admin' team. The admin team should be em...

Guest about 5 years ago in Atlas (Control Plane and Data Plane RBAC) 0 Submitted

1 VOTE

Masking of PII fields

Context: We have multiple downstream systems that consume data from MongoDB. These systems are not capable of decrypting sensitive Personally Identifiable Information (PII) fields. Currently, to protect PII, data is encrypted in MongoDB, but downs...

Guest 9 months ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

6 VOTE

Reuse email address for new Atlas account

Please allow email addresses to be reused/reinstated for new Atlas accounts if an Atlas account associated with that email address has been deleted.

David Walker over 4 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

4 VOTE

Use a private peering that resolves to the private IP address of your LDAP server.

We need to consume an LDAP server traffic through Private Endpoints. In the documentation we find that only creating a public endpoint it's possible but we have a security restriction. Our TAM suggested create a feedback request to the product own...

Guest about 3 years ago in Security, IAM, and Compliance 0 Submitted

2 VOTE

log redaction customization

If we have customizations on the log redaction feature then we can add our preference where we have to apply log redaction. As of now according to my opinion it is getting applied on the all log fields which may create a issue while troubleshootin...

Guest over 1 year ago in Security, IAM, and Compliance 0 Submitted

7 VOTE

Day granularity for Atlas-managed X.509 certificate

It would be great to add more granularity when creating an Atlas-managed X.509 certificate for a MongoDB user, i mean by day at least. Thank you

Guest about 6 years ago in Atlas (Control Plane and Data Plane RBAC) 1 Submitted

6 VOTE

Deny Privilege

Provide the ability to explicitly deny a privilege on a specific resource. Example: Grant the privilege to perform the find action on all collections in the test database except "test.secrets".

Guest over 5 years ago in Security, IAM, and Compliance 1 Submitted

Please enter your email address

FILTER BY CATEGORY