Definition定义
db.getUser(username, args)Returns user information for a specified user. Run this method on the user's database.返回指定用户的用户信息。在用户的数据库上运行此方法。If the user doesn't exist in the database,如果数据库中不存在该用户,db.getUser()returnsnull.db.getUser()将返回null。Thedb.getUser()method has the following parameters:db.getUser()方法有以下参数:db.getUser( "<username>", {
showCredentials: <Boolean>,
showCustomData: <Boolean>,
showPrivileges: <Boolean>,
showAuthenticationRestrictions: <Boolean>,
filter: <document>
} )Parameter参数Type类型Description描述usernamestring字符串The name of the user for which to retrieve information.要检索其信息的用户的名称。argsdocument文档Optional.可选。A document specifying additional arguments.指定其他参数的文档。Theargsdocument supports the following fields:args文档支持以下字段:Field字段Type类型Description描述showCredentialsboolean布尔值Optional.可选。Set to设置为trueto display the user's password hash.true以显示用户的密码哈希值。By default, this field is默认情况下,此字段为false.false。showCustomDataboolean布尔值Optional.可选。Set to设置为falseto omit the user'scustomDatafrom the output.false可从输出中省略用户的customData。By default, this field is默认情况下,此字段为true.true。New in version 5.2.在版本5.2中新增。showPrivilegesboolean布尔值Optional.可选。Set to设置为trueto show the user's full set of privileges, including expanded information for the inherited roles.true可显示用户的全部权限,包括继承角色的扩展信息。By default, this field is默认情况下,此字段为false.false。If viewing all users, you cannot specify this field.如果查看所有用户,则无法指定此字段。showAuthenticationRestrictionsboolean布尔值Optional.可选。Set to设置为trueto show the user's authentication restrictions.true以显示用户的身份验证限制。By default, this field is默认情况下,此字段为false.false。If viewing all users, you cannot specify this field.如果查看所有用户,则无法指定此字段。filterdocument文档Optional.可选。A document that specifies一个文档,指定$matchstage conditions to return information for users that match the filter conditions.$match阶段条件,为符合筛选条件的用户返回信息。db.getUser()wraps the包装usersInfo: <username>command.usersInfo: <username>命令。For details on output, see有关输出的详细信息,请参阅usersInfo.usersInfo。
Compatibility兼容性
This method is available in deployments hosted in the following environments:此方法在以下环境中托管的部署中可用:
Important
This command is not supported in MongoDB Atlas clusters. MongoDB Atlas集群不支持此命令。For information on Atlas support for all commands, see Unsupported Commands.有关Atlas支持所有命令的信息,请参阅不支持的命令。
- MongoDB Enterprise
: The subscription-based, self-managed version of MongoDB:MongoDB的基于订阅的自我管理版本 - MongoDB Community
: The source-available, free-to-use, and self-managed version of MongoDB:MongoDB的源代码可用、免费使用和自我管理版本
Required Access所需访问权限
To view another user's information, you must have the 要查看其他用户的信息,您必须对其他用户的数据库执行viewUser action on the other user's database.viewUser操作。
Users can view their own information.用户可以查看自己的信息。
Examples示例
The following operations return information about an example 以下操作返回appClient user in an accounts database:accounts数据库中示例appClient用户的信息:
use accounts
db.getUser("appClient")
Example output:示例输出:
{
_id: 'accounts.appClient',
userId: UUID("1c2fc1bf-c4dc-4a22-8b04-3971349ce0dc"),
user: 'appClient',
db: 'accounts',
roles: [],
mechanisms: [ 'SCRAM-SHA-1', 'SCRAM-SHA-256' ]
}
Omit Custom Data from Output从输出中省略自定义数据
New in version 5.2.在版本5.2中新增。 To omit a user's custom data from the 要从db.getUser() output, set the showCustomData option to false.db.getUser()输出中省略用户的自定义数据,请将showCustomData选项设置为false。
Use the 使用createUser command to create a user named accountAdmin01 on the products database:createUser命令在产品数据库上创建名为accountAdmin01的用户:
db.getSiblingDB("products").runCommand( {
createUser: "accountAdmin01",
pwd: passwordPrompt(),
customData: { employeeId: 12345 },
roles: [ { role: 'readWrite', db: 'products' } ]
} )
The user contains a 用户包含customData field of { employeeId: 12345 }.{ employeeId: 12345 }的customData字段。
To retrieve the user but omit the custom data from the output, run 要检索用户但从输出中省略自定义数据,请运行db.getUser() with showCustomData set to false:db.getUser()并将showCustomData设置为false:
db.getSiblingDB("products").getUser(
"accountAdmin01",
{ showCustomData: false }
)
Example output:示例输出:
{
_id: 'products.accountAdmin01',
userId: UUID("0955afc1-303c-4683-a029-8e17dd5501f4"),
user: 'accountAdmin01',
db: 'products',
roles: [ { role: 'readWrite', db: 'products' } ],
mechanisms: [ 'SCRAM-SHA-1', 'SCRAM-SHA-256' ]
}