# Security option details required

**URL:** <https://discuss.aerospike.com/t/security-option-details-required/2186>\
**Category:** Security\
**Created:** [November 26, 2015, 9:30am UTC](https://discuss.aerospike.com/t/security-option-details-required/2186 "2015-11-26T09:30:19Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dennis](https://avatars.discourse-cdn.com/v4/letter/d/e56c9b/32.png) [@Dennis](https://discuss.aerospike.com/u/Dennis)\
**Post date:** [November 26, 2015, 9:30am UTC](https://discuss.aerospike.com/t/security-option-details-required/2186/1 "2015-11-26T09:30:19Z")

</div>

Hi!

Could you please describe how absence of security limits Community Version?

In my understanding, I won’t be able to create users and limit their permissions. Is this correct? Does this mean that production servers are _de facto_ open to public (well… maybe with smth like root/root)?

I would appreciate as much details as possible or maybe you have a page already with this info.

Thank you! Dennis

---

<div class="post-metadata">

**Author:** ![anushree](https://avatars.discourse-cdn.com/v4/letter/a/e0b2c6/32.png) [@anushree](https://discuss.aerospike.com/u/anushree)\
**Post date:** [December 30, 2015, 11:16pm UTC](https://discuss.aerospike.com/t/security-option-details-required/2186/2 "2015-12-30T23:16:17Z")

</div>

Yes, with security feature you will be able to create users and limit their permissions. Without security of course, anyone who has access to your Aerospike servers will be able to modify configuration, update and/or delete data.

Here are links to a blog by our CTO and our internal documentation on the different user permissions for Security that can be set:

[http://www.aerospike.com/blog/aerospike-release-security-flexibility-performance/](http://www.aerospike.com/blog/aerospike-release-security-flexibility-performance/)

[http://www.aerospike.com/docs/guide/security.html](http://www.aerospike.com/docs/guide/security.html)

---

<div class="post-metadata">

**Author:** ![Dennis](https://avatars.discourse-cdn.com/v4/letter/d/e56c9b/32.png) [@Dennis](https://discuss.aerospike.com/u/Dennis)\
**Post date:** [January 1, 2016, 2:26am UTC](https://discuss.aerospike.com/t/security-option-details-required/2186/3 "2016-01-01T02:26:11Z")

</div>

Thank you! …and Happy Holidays!

---

<div class="post-metadata">

**Author:** ![kporter](https://sea1.discourse-cdn.com/flex019/user_avatar/discuss.aerospike.com/kporter/32/515_2.png) [@kporter](https://discuss.aerospike.com/u/kporter)\
**Post date:** [January 1, 2016, 3:37am UTC](https://discuss.aerospike.com/t/security-option-details-required/2186/4 "2016-01-01T03:37:41Z")

</div>

At risk of stating the obvious: Security or no security features, Aerospike shouldn’t be accessible to public networks.

---

<div class="post-metadata">

**Author:** ![rbotzer](https://sea1.discourse-cdn.com/flex019/user_avatar/discuss.aerospike.com/rbotzer/32/2114_2.png) [@rbotzer](https://discuss.aerospike.com/u/rbotzer)\
**Post date:** [January 1, 2016, 6:44am UTC](https://discuss.aerospike.com/t/security-option-details-required/2186/5 "2016-01-01T06:44:02Z")

</div>

Or any database, ever.