MongoDB: is it safe to use document's ID “in public”?

Question

I really like MongoDB\'s automatically generated ids. They are really useful.

However, is it save to use them publicly?

Let\'s say there is a posts collecti

Answer 1

1. If id gives link to "unlisted" content that requires only link - it's privacy issue.

2. If id gives a link to content that is under user login - not a problem.

No matter if it's MongoDb, SQL or any other id. Id is the key to data. If this key is only thing you need to view content that you should not - that's an issue. For such situation - generate unguessable id.