您好,登錄后才能下訂單哦!
1. 背景
* 角色的概念管理數(shù)據(jù)庫(kù)訪問(wèn)權(quán)限。 根據(jù)角色自身的設(shè)置不同,一個(gè)角色可以看做是一個(gè)數(shù)據(jù)庫(kù)用戶,或者一組數(shù)據(jù)庫(kù)用戶。 角色可以擁有數(shù)據(jù)庫(kù)對(duì)象(比如,表)以及可以把這些對(duì)象上的權(quán)限賦予其它角色, 以控制誰(shuí)擁有訪問(wèn)哪些對(duì)象的權(quán)限。另外,我們也可以把一個(gè)角色的成員 (membership)權(quán)限賦予其它角色,這樣就允許成員角色使用它被賦予成員權(quán)限的角色之權(quán)限。
* MySQL 5.7開(kāi)始利用 'proxy' 代理實(shí)現(xiàn)類似 'rols' 角色管理功能。
2. 環(huán)境
* MySQL Server
Server version: 5.7.18 MySQL Community Server (GPL) Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> select version(); +-----------+ | version() | +-----------+ | 5.7.18 | +-----------+ 1 row in set (0.00 sec)
3. 實(shí)現(xiàn)
* 啟用代理用戶映射
mysql> SET @@global.check_proxy_users = ON; Query OK, 0 rows affected (0.00 sec) mysql> SET @@global.mysql_native_password_proxy_users = ON; Query OK, 0 rows affected (0.00 sec)
* 創(chuàng)建角色(rols) 用戶
mysql> create user 'rols_it'@'127.0.0.1'; Query OK, 0 rows affected (0.01 sec)
* 創(chuàng)建普通用戶tom
mysql> create user 'tom'@'127.0.0.1' identified by '123456'; Query OK, 0 rows affected (0.00 sec)
* 通過(guò)proxy方式添加tom用戶到角色
mysql> grant proxy on 'rols_it'@'127.0.0.1' to 'tom'@'127.0.0.1'; Query OK, 0 rows affected (0.00 sec)
4. 測(cè)試
* 創(chuàng)建測(cè)試數(shù)據(jù)庫(kù) it
mysql> create database it; Query OK, 1 row affected (0.00 sec)
* 給角色 (rols) 添加數(shù)據(jù)庫(kù) it 的查看權(quán)限
mysql> grant select ON it.* TO 'rols_it'@'127.0.0.1'; Query OK, 0 rows affected (0.00 sec)
* 查看角色權(quán)限
mysql> show grants for 'rols_it'@'127.0.0.1'; +-------------------------------------------------+ | Grants for rols_it@127.0.0.1 | +-------------------------------------------------+ | GRANT USAGE ON *.* TO 'rols_it'@'127.0.0.1' | | GRANT SELECT ON `it`.* TO 'rols_it'@'127.0.0.1' | +-------------------------------------------------+ 2 rows in set (0.01 sec)
* 查看tom用戶權(quán)限
mysql> show grants for 'tom'@'127.0.0.1'; +-----------------------------------------------------------+ | Grants for tom@127.0.0.1 | +-----------------------------------------------------------+ | GRANT USAGE ON *.* TO 'tom'@'127.0.0.1' | | GRANT PROXY ON 'rols_it'@'127.0.0.1' TO 'tom'@'127.0.0.1' | +-----------------------------------------------------------+ 2 rows in set (0.00 sec)
* 通過(guò)tom用戶登陸連接MySQL
[root@MySQL mysql_data]# mysql -utom -p123456 -h227.0.0.1 mysql: [Warning] Using a password on the command line interface can be insecure. Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 14 Server version: 5.7.18-log MySQL Community Server (GPL) Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | it | +--------------------+ 2 rows in set (0.00 sec)
5. 總結(jié)
以需求驅(qū)動(dòng)技術(shù),技術(shù)本身沒(méi)有優(yōu)略之分,只有業(yè)務(wù)之分。
免責(zé)聲明:本站發(fā)布的內(nèi)容(圖片、視頻和文字)以原創(chuàng)、轉(zhuǎn)載和分享為主,文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng),如果涉及侵權(quán)請(qǐng)聯(lián)系站長(zhǎng)郵箱:is@yisu.com進(jìn)行舉報(bào),并提供相關(guān)證據(jù),一經(jīng)查實(shí),將立刻刪除涉嫌侵權(quán)內(nèi)容。