一、創建數據庫用戶
命令:CREATE USER 'username'@'host' IDENTIFIED BY 'password';
說明:
username:你將創建的用戶名
host:指定該用戶在哪個主機上可以登陸,如果是本地用戶可用localhost,如果想讓該用戶可以從任意遠程主機登陸,可以使用通配符%
password:該用戶的登陸密碼,密碼可以為空,如果為空則該用戶可以不需要密碼登陸服務器
例子:
CREATE USER 'username'@'host' IDENTIFIED BY 'password'; CREATE USER 'dog'@'localhost' IDENTIFIED BY '123456'; CREATE USER 'pig'@'192.168.1.101_' IDENDIFIED BY '123456'; CREATE USER 'pig'@'%' IDENTIFIED BY '123456'; CREATE USER 'pig'@'%' IDENTIFIED BY ''; CREATE USER 'pig'@'%';
二. 授權:
命令:GRANT privileges ON databasename.tablename TO 'username'@'host'
說明:
privileges:用戶的操作權限,如SELECT,INSERT,UPDATE等,如果要授予所的權限則使用ALL
databasename:數據庫名
tablename:表名,如果要授予該用戶對所有數據庫和表的相應操作權限則可用*表示,如*.*
例子:
GRANT SELECT, INSERT ON test.user TO 'pig'@'%';
GRANT ALL ON *.* TO 'pig'@'%';
GRANT ALL ON maindataplus.* TO 'pig'@'%';
注意:
用以上命令授權的用戶不能給其它用戶授權,如果想讓該用戶可以授權,用以下命令:
GRANT privileges ON databasename.tablename TO 'username'@'host' WITH GRANT OPTION;
我是以root用戶登錄mysql的,怎么還會遇到這問題呢,有點貓膩,我查看了下mysql下user表的各用戶的權限信息
MariaDB [(none)]> SELECT host,user,password,Grant_priv,Super_priv FROM mysql.user; +-----------+--------------+-------------------------------------------+------------+------------+ | host | user | password | Grant_priv | Super_priv | +-----------+--------------+-------------------------------------------+------------+------------+ | localhost | root | *0B42D92AC77455330A27220D61D24E3BC5740CCF | N | N | | 127.0.0.1 | root | *0B42D92AC77455330A27220D61D24E3BC5740CCF | Y | Y | | ::1 | root | *0B42D92AC77455330A27220D61D24E3BC5740CCF | Y | Y | | % | root | *0B42D92AC77455330A27220D61D24E3BC5740CCF | Y | Y | | % | cloudcon-api | *6A10AB79A4E1F6E732940B18612AF3C7A1F1528E | Y | Y | | localhost | cloudcon | *5C16B0FAA9461AFF9D78785B71A86ECD0D1583D2 | Y | Y | +-----------+--------------+-------------------------------------------+------------+------------+ 6 rows in set (0.00 sec)
可以看到授權的權限沒有打開: Grant_priv is set to N for root@%. 修復下
UPDATE mysql.user SET Grant_priv='Y', Super_priv='Y' WHERE User='root'; FLUSH PRIVILEGES;
重新登錄下,就ok了。如果不能執行update的話,那就先停下mysql服務,然后mysqld_safe --skip-grant-table &