MySQL 权限分配

搭建

Posted by dbstack on December 27, 2018

MySQL 权限分配

读写权限

mysql>show grants for wr;
+------------------------------------------------------+
| Grants for wr@%                                 |
+------------------------------------------------------+
| GRANT USAGE ON *.* TO 'diamond'@'%'                  |
| GRANT ALL PRIVILEGES ON `diamond`.* TO 'wr'@'%' |
+------------------------------------------------------+

DML权限

mysql> show grants for dml;
+--------------------------------------------------------------------------------------------------------------------------------------------+
| Grants for dml@%                                                                                                                           |
+--------------------------------------------------------------------------------------------------------------------------------------------+
| GRANT PROCESS, REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'dml'@'%'                                                                   |
| GRANT SELECT, INSERT, UPDATE, DELETE, CREATE TEMPORARY TABLES, LOCK TABLES, EXECUTE, SHOW VIEW, EVENT, TRIGGER ON `diamond`.* TO 'dml'@'%' |
| GRANT SELECT ON `mysql`.`help_category` TO 'dml'@'%'                                                                                       |
| GRANT SELECT ON `mysql`.`time_zone_transition_type` TO 'dml'@'%'                                                                           |
| GRANT SELECT ON `mysql`.`help_relation` TO 'dml'@'%'                                                                                       |
| GRANT SELECT ON `mysql`.`event` TO 'dml'@'%'                                                                                               |
| GRANT SELECT ON `mysql`.`help_keyword` TO 'dml'@'%'                                                                                        |
| GRANT SELECT ON `mysql`.`time_zone_leap_second` TO 'dml'@'%'                                                                               |
| GRANT SELECT ON `mysql`.`time_zone_transition` TO 'dml'@'%'                                                                                |
| GRANT SELECT ON `mysql`.`time_zone` TO 'dml'@'%'                                                                                           |
| GRANT SELECT ON `mysql`.`time_zone_name` TO 'dml'@'%'                                                                                      |
| GRANT SELECT ON `mysql`.`general_log` TO 'dml'@'%'                                                                                         |
| GRANT SELECT ON `mysql`.`slow_log` TO 'dml'@'%'                                                                                            |
| GRANT SELECT ON `mysql`.`help_topic` TO 'dml'@'%'                                                                                          |
| GRANT SELECT ON `mysql`.`proc` TO 'dml'@'%'                                                                                                |
| GRANT SELECT ON `mysql`.`func` TO 'dml'@'%'                                                                                                |
+--------------------------------------------------------------------------------------------------------------------------------------------+

DDL

mysql> show grants for ddl;
+-----------------------------------------------------------------------------------------------------------------------------------------------------------+
| Grants for ddl@%                                                                                                                                          |
+-----------------------------------------------------------------------------------------------------------------------------------------------------------+
| GRANT PROCESS, REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'ddl'@'%'                                                                                  |
| GRANT CREATE, DROP, INDEX, ALTER, CREATE TEMPORARY TABLES, LOCK TABLES, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE ON `diamond`.* TO 'ddl'@'%' |
| GRANT SELECT ON `mysql`.`help_category` TO 'ddl'@'%'                                                                                                      |
| GRANT SELECT ON `mysql`.`time_zone_transition_type` TO 'ddl'@'%'                                                                                          |
| GRANT SELECT ON `mysql`.`help_relation` TO 'ddl'@'%'                                                                                                      |
| GRANT SELECT ON `mysql`.`event` TO 'ddl'@'%'                                                                                                              |
| GRANT SELECT ON `mysql`.`help_keyword` TO 'ddl'@'%'                                                                                                       |
| GRANT SELECT ON `mysql`.`time_zone_leap_second` TO 'ddl'@'%'                                                                                              |
| GRANT SELECT ON `mysql`.`time_zone_transition` TO 'ddl'@'%'                                                                                               |
| GRANT SELECT ON `mysql`.`time_zone` TO 'ddl'@'%'                                                                                                          |
| GRANT SELECT ON `mysql`.`time_zone_name` TO 'ddl'@'%'                                                                                                     |
| GRANT SELECT ON `mysql`.`general_log` TO 'ddl'@'%'                                                                                                        |
| GRANT SELECT ON `mysql`.`slow_log` TO 'ddl'@'%'                                                                                                           |
| GRANT SELECT ON `mysql`.`help_topic` TO 'ddl'@'%'                                                                                                         |
| GRANT SELECT ON `mysql`.`proc` TO 'ddl'@'%'                                                                                                               |
| GRANT SELECT ON `mysql`.`func` TO 'ddl'@'%'                                                                                                               |
+-----------------------------------------------------------------------------------------------------------------------------------------------------------+

只读权限

mysql> show grants for only-write;
+---------------------------------------------------------------------------------+
| Grants for only-write@%                                                         |
+---------------------------------------------------------------------------------+
| GRANT PROCESS, REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'only-write'@'%' |
| GRANT SELECT, LOCK TABLES, SHOW VIEW ON `diamond`.* TO 'only-write'@'%'         |
| GRANT SELECT ON `mysql`.`help_category` TO 'only-write'@'%'                     |
| GRANT SELECT ON `mysql`.`time_zone_transition_type` TO 'only-write'@'%'         |
| GRANT SELECT ON `mysql`.`help_relation` TO 'only-write'@'%'                     |
| GRANT SELECT ON `mysql`.`event` TO 'only-write'@'%'                             |
| GRANT SELECT ON `mysql`.`help_keyword` TO 'only-write'@'%'                      |
| GRANT SELECT ON `mysql`.`time_zone_leap_second` TO 'only-write'@'%'             |
| GRANT SELECT ON `mysql`.`time_zone_transition` TO 'only-write'@'%'              |
| GRANT SELECT ON `mysql`.`time_zone` TO 'only-write'@'%'                         |
| GRANT SELECT ON `mysql`.`time_zone_name` TO 'only-write'@'%'                    |
| GRANT SELECT ON `mysql`.`general_log` TO 'only-write'@'%'                       |
| GRANT SELECT ON `mysql`.`slow_log` TO 'only-write'@'%'                          |
| GRANT SELECT ON `mysql`.`help_topic` TO 'only-write'@'%'                        |
| GRANT SELECT ON `mysql`.`proc` TO 'only-write'@'%'                              |
| GRANT SELECT ON `mysql`.`func` TO 'only-write'@'%'                              |
+---------------------------------------------------------------------------------+