Why does mongo allow you to login without authentication data?

Question

MongoDB

I'm trying to create a super user with top privileges:

>db.system.users.find().pretty()
{
"_id" : ObjectId("533aa7175572233602378633"),
"user" : "root",
"pwd" : "06dbc97127a71ab5b359a6a6e9ff5f53",
"roles" : [
    "readWrite",
    "userAdmin",
    "dbAdmin",
    "readWriteAnyDatabase",
    "userAdminAnyDatabase",
    "dbAdminAnyDatabase"
]
}

Login options:
mongo some_db -u root -p 5415- ok!
mongo some_db -u root -p 54153- error!
mongo some_db- ok! Why does mongo allow login even in this case?
PS:
auth = trueinstalled in the config.

Answer 1

ok! Why does mongo allow logins, even in this case?

There is a login to the console, but the data is not available, then you need to log in via db.auth()
PS: To restrict access, developers recommend using OS tools instead of password authorization.

Answer 2

Set the some_db base login password, so it will not even allow the super-user to log in.