1. 背景
* 角色的概念管理數(shù)據(jù)庫(kù)訪問(wèn)權(quán)限。 根據(jù)角色自身的設(shè)置不同,一個(gè)角色可以看做是一個(gè)數(shù)據(jù)庫(kù)用戶,或者一組數(shù)據(jù)庫(kù)用戶。 角色可以擁有數(shù)據(jù)庫(kù)對(duì)象(比如,表)以及可以把這些對(duì)象上的權(quán)限賦予其它角色, 以控制誰(shuí)擁有訪問(wèn)哪些對(duì)象的權(quán)限。另外,我們也可以把一個(gè)角色的成員 (membership)權(quán)限賦予其它角色,這樣就允許成員角色使用它被賦予成員權(quán)限的角色之權(quán)限。
* MySQL 5.7開(kāi)始利用 'proxy' 代理實(shí)現(xiàn)類(lèi)似 'rols' 角色管理功能。
2. 環(huán)境
* MySQL Server
Server version: 5.7.18 MySQL Community Server (GPL) Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> select version(); +-----------+ | version() | +-----------+ | 5.7.18 | +-----------+ 1 row in set (0.00 sec)3. 實(shí)現(xiàn)
* 啟用代理用戶映射
mysql> SET @@global.check_proxy_users = ON; Query OK, 0 rows affected (0.00 sec) mysql> SET @@global.mysql_native_password_proxy_users = ON; Query OK, 0 rows affected (0.00 sec)* 創(chuàng)建角色(rols) 用戶
mysql> create user 'rols_it'@'127.0.0.1'; Query OK, 0 rows affected (0.01 sec)* 創(chuàng)建普通用戶tom
mysql> create user 'tom'@'127.0.0.1' identified by '123456'; Query OK, 0 rows affected (0.00 sec)* 通過(guò)proxy方式添加tom用戶到角色
mysql> grant proxy on 'rols_it'@'127.0.0.1' to 'tom'@'127.0.0.1'; Query OK, 0 rows affected (0.00 sec)4. 測(cè)試
* 創(chuàng)建測(cè)試數(shù)據(jù)庫(kù) it
mysql> create database it; Query OK, 1 row affected (0.00 sec)* 給角色 (rols) 添加數(shù)據(jù)庫(kù) it 的查看權(quán)限
mysql> grant select ON it.* TO 'rols_it'@'127.0.0.1'; Query OK, 0 rows affected (0.00 sec)* 查看角色權(quán)限
mysql> show grants for 'rols_it'@'127.0.0.1'; +-------------------------------------------------+ | Grants for rols_it@127.0.0.1 | +-------------------------------------------------+ | GRANT USAGE ON *.* TO 'rols_it'@'127.0.0.1' | | GRANT SELECT ON `it`.* TO 'rols_it'@'127.0.0.1' | +-------------------------------------------------+ 2 rows in set (0.01 sec)* 查看tom用戶權(quán)限
mysql> show grants for 'tom'@'127.0.0.1'; +-----------------------------------------------------------+ | Grants for tom@127.0.0.1 | +-----------------------------------------------------------+ | GRANT USAGE ON *.* TO 'tom'@'127.0.0.1' | | GRANT PROXY ON 'rols_it'@'127.0.0.1' TO 'tom'@'127.0.0.1' | +-----------------------------------------------------------+ 2 rows in set (0.00 sec)* 通過(guò)tom用戶登陸連接MySQL
[root@MySQL mysql_data]# mysql -utom -p123456 -h227.0.0.1 mysql: [Warning] Using a password on the command line interface can be insecure. Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 14 Server version: 5.7.18-log MySQL Community Server (GPL) Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | it | +--------------------+ 2 rows in set (0.00 sec)5. 總結(jié)
以需求驅(qū)動(dòng)技術(shù),技術(shù)本身沒(méi)有優(yōu)略之分,只有業(yè)務(wù)之分。
另外有需要云服務(wù)器可以了解下創(chuàng)新互聯(lián)cdcxhl.cn,海內(nèi)外云服務(wù)器15元起步,三天無(wú)理由+7*72小時(shí)售后在線,公司持有idc許可證,提供“云服務(wù)器、裸金屬服務(wù)器、高防服務(wù)器、香港服務(wù)器、美國(guó)服務(wù)器、虛擬主機(jī)、免備案服務(wù)器”等云主機(jī)租用服務(wù)以及企業(yè)上云的綜合解決方案,具有“安全穩(wěn)定、簡(jiǎn)單易用、服務(wù)可用性高、性價(jià)比高”等特點(diǎn)與優(yōu)勢(shì),專(zhuān)為企業(yè)上云打造定制,能夠滿足用戶豐富、多元化的應(yīng)用場(chǎng)景需求。
分享文章:MySQL5.7--------proxy實(shí)現(xiàn)rols管理-創(chuàng)新互聯(lián)
瀏覽路徑:http://aaarwkj.com/article26/dopgcg.html
成都網(wǎng)站建設(shè)公司_創(chuàng)新互聯(lián),為您提供營(yíng)銷(xiāo)型網(wǎng)站建設(shè)、品牌網(wǎng)站設(shè)計(jì)、App開(kāi)發(fā)、網(wǎng)站排名、網(wǎng)站設(shè)計(jì)公司、云服務(wù)器
聲明:本網(wǎng)站發(fā)布的內(nèi)容(圖片、視頻和文字)以用戶投稿、用戶轉(zhuǎn)載內(nèi)容為主,如果涉及侵權(quán)請(qǐng)盡快告知,我們將會(huì)在第一時(shí)間刪除。文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng),如需處理請(qǐng)聯(lián)系客服。電話:028-86922220;郵箱:631063699@qq.com。內(nèi)容未經(jīng)允許不得轉(zhuǎn)載,或轉(zhuǎn)載時(shí)需注明來(lái)源: 創(chuàng)新互聯(lián)
猜你還喜歡下面的內(nèi)容