Using MongoDB to separate different user data

Question

I'm already familiar that MongoDB is based on documents that are in JSON format. I'm creating my first web app using the MEAN stack, where users can register and then be able to sign in to a back-end dashboard where they can implement products/profile information etc. How would I set that up to be stored on MongoDB? would each user be stored as a document? And as far as security reasons, how can I go about not allowing a GET request to be able to get a different users information?

Currently, I just have a collection of users, and a collection of products (with the unique id number for each user), etc. to me that doesn't seem the proper way to store data.

If anyone can help me on how to setup the database for Mongo that would be fantastic! Thanks in advance!

Matías Fidemraizer · Accepted Answer · 2015-12-22 19:12:41Z

1

would each user be stored as a document?

Yes, each user is an object, thus it's stored as a separate document.

how can I go about not allowing a GET request to be able to get a different users information?

This has nothing to do with Mongo or any other data storage mechanism. You'll need to work on a Web service layer which exposes your data filtering requests to authorize them based on user role, claims or any authorization approach you might find useful in your scenario.

Maybe you should look at implementing OAuth2. There's a package that integrates with Express to implement your own OAuth2 authorization server: node-oauth2-server.

answered Dec 22, 2015 at 19:12

Matías Fidemraizer

65.1k19 gold badges132 silver badges216 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

nvartolomei · Accepted Answer · 2015-12-22 20:40:38Z

1

Currently, I just have a collection of users, and a collection of products (with the unique id number for each user), etc. to me that doesn't seem the proper way to store data.

You are on the right way actually. Now when you show products page for users you need to retrieve only documents that belong to that single user that is currently authenticated, this implies that you have authentication set up, and products have a userId field.

This is how most application work. If you want to read about other ways of solving this then read about multi-tenancy.

answered Dec 22, 2015 at 20:40

nvartolomei

1,50512 silver badges16 bronze badges

Collectives™ on Stack Overflow

Using MongoDB to separate different user data

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related