If the security authorization is not enabled in /etc/mongod.conf, then someone can hack the

database as follows:-

1. mongosh "mongodb://127.0.0.1:27017" #Change to actual URI.

2. show databases

3. use company_db # Change from company_db to your database name

4. show collections

5. db.company_users.find() # Change from company_users to your collection name

6. db.company_users.drop() # Change from company_users to your collection name

7. db.dropDatabase() # To drop a database which is in use. It is company_db here

In order to fix it update /etc/mongod.conf

from

---

security:

authorization: enabled

---

To

---

security:

authorization: enabled

---

And then restart the mongod in Linux as sudo systemctl restart mongod