mysql基础知识-3

发布时间:2019-07-06 10:49:59编辑:auto阅读(1751)

    一、mysql修改用户密码方法:

        方法一:mysqladmin -u username -h host -p password 'new_password';

        方法二:mysql>set password for 'username'@'host'=password('new_password');

        方法三:mysql>update mysql.user set password=password('new_password') 

                                where User='username';

              mysql>flush privileges;


    二、mysql创建用户

        mysql>create user 'username'@'host' identified by 'password';

    三、mysql删除用户

        mysql>drop user 'username'@'host';

    四、mysql用户重命名

        mysql>RENAME USER old_user TO new_user;


    五、授权(grant,revoke)

        1、查看用户授权信息

        mysql>show grants for 'username'@'host';

        2、授权

        官方文档:http://dev.mysql.com/doc/refman/5.7/en/grant.html

    GRANT    priv_type [(column_list)]
          [, priv_type [(column_list)]] ...
        ON [object_type] priv_level
        TO user_specification [, user_specification] ...
        [REQUIRE {NONE | tls_option [[AND] tls_option] ...}]
        [WITH {GRANT OPTION | resource_option} ...]
    object_type: {
        TABLE
      | FUNCTION
      | PROCEDURE
    }priv_level: {
        *
      | *.*
      | db_name.*
      | db_name.tbl_name
      | tbl_name
      | db_name.routine_name}user_specification:    user [ auth_option ]auth_option: {     # Before MySQL 5.7.6
        IDENTIFIED BY 'auth_string'
      | IDENTIFIED BY PASSWORD 'hash_string'
      | IDENTIFIED WITH auth_plugin
      | IDENTIFIED WITH auth_plugin AS 'hash_string'
    }auth_option: {     # As of MySQL 5.7.6
        IDENTIFIED BY 'auth_string'
      | IDENTIFIED BY PASSWORD 'hash_string'
      | IDENTIFIED WITH auth_plugin
      | IDENTIFIED WITH auth_plugin BY 'auth_string'
      | IDENTIFIED WITH auth_plugin AS 'hash_string'
    }tls_option: {
        SSL
      | X509
      | CIPHER 'cipher'
      | ISSUER 'issuer'
      | SUBJECT 'subject'
    }resource_option: {
      | MAX_QUERIES_PER_HOUR count
      | MAX_UPDATES_PER_HOUR count
      | MAX_CONNECTIONS_PER_HOUR count
      | MAX_USER_CONNECTIONS count}
    PrivilegeMeaning and Grantable Levels
    ALL [PRIVILEGES]Grant all privileges at specified access level except GRANT OPTION
    ALTEREnable use of ALTER TABLE. Levels: Global, database, table.
    ALTER ROUTINEEnable stored routines to be altered or dropped. Levels: Global, database, procedure.
    CREATEEnable database and table creation. Levels: Global, database, table.
    CREATE ROUTINEEnable stored routine creation. Levels: Global, database.
    CREATE TABLESPACEEnable tablespaces and log file groups to be created, altered, or dropped. Level: Global.
    CREATE TEMPORARY TABLESEnable use of CREATE TEMPORARY TABLE. Levels: Global, database.
    CREATE USEREnable use of CREATE USERDROP USERRENAME USER, and REVOKE ALL PRIVILEGES. Level: Global.
    CREATE VIEWEnable views to be created or altered. Levels: Global, database, table.
    DELETEEnable use of DELETE. Level: Global, database, table.
    DROPEnable databases, tables, and views to be dropped. Levels: Global, database, table.
    EVENTEnable use of events for the Event Scheduler. Levels: Global, database.
    EXECUTEEnable the user to execute stored routines. Levels: Global, database, table.
    FILEEnable the user to cause the server to read or write files. Level: Global.
    GRANT OPTIONEnable privileges to be granted to or removed from other accounts. Levels: Global, database, table, procedure, proxy.
    INDEXEnable indexes to be created or dropped. Levels: Global, database, table.
    INSERTEnable use of INSERT. Levels: Global, database, table, column.
    LOCK TABLESEnable use of LOCK TABLES on tables for which you have the SELECT privilege. Levels: Global, database.
    PROCESSEnable the user to see all processes with SHOW PROCESSLIST. Level: Global.
    PROXYEnable user proxying. Level: From user to user.
    REFERENCESEnable foreign key creation. Levels: Global, database, table, column.
    RELOADEnable use of FLUSH operations. Level: Global.
    REPLICATION CLIENTEnable the user to ask where master or slave servers are. Level: Global.
    REPLICATION SLAVEEnable replication slaves to read binary log events from the master. Level: Global.
    SELECTEnable use of SELECT. Levels: Global, database, table, column.
    SHOW DATABASESEnable SHOW DATABASES to show all databases. Level: Global.
    SHOW VIEWEnable use of SHOW CREATE VIEW. Levels: Global, database, table.
    SHUTDOWNEnable use of mysqladmin shutdown. Level: Global.
    SUPEREnable use of other administrative operations such as CHANGE MASTER TOKILLPURGE BINARY LOGSSET GLOBAL, and mysqladmin debugcommand. Level: Global.
    TRIGGEREnable trigger operations. Levels: Global, database, table.
    UPDATEEnable use of UPDATE. Levels: Global, database, table, column.
    USAGESynonym for no privileges

    eg:

    GRANT priv_type ON *.* TO 'someuser'@'somehost' WITH GRANT OPTION;

        3、取消授权(revoke)

        

    REVOKE    priv_type [(column_list)]
          [, priv_type [(column_list)]] ...
        ON [object_type] priv_level
        FROM user [, user] ...
    
    REVOKE ALL PRIVILEGES, GRANT OPTION
        FROM user [, user] ...

    eg:

    REVOKE INSERT ON *.* FROM 'jeffrey'@'localhost';
    REVOKE ALL PRIVILEGES, GRANT OPTION FROM user [, user] ...


关键字

上一篇: ansible<3>

下一篇: 参加WinHEC 2008 China大