Set of bash & JavaScript to show that user with readWrite role can drop a collection

userDefinedRole-readWrite-drop.sh

mongo social --port 28000 -u app_user -p password --authenticationDatabase admin
# output of above command
# MongoDB shell version v3.6.2
# connecting to: mongodb://127.0.0.1:28000/social
# MongoDB server version: 3.6.2
# replset:PRIMARY>

# create a document in person collection
db.person.insert({"fname": "Shyam", "lname": "Arjarapu"})
# output of above command
# WriteResult({ "nInserted" : 1 })

db.getCollectionNames()
# The output of above command
# [ "person" ]

# drop the collection
db.person.drop()
# The output of above command
# true

db.getCollectionNames()
# The output of above command
# [ ]