命令:CREATE USER 'username'@'host' IDENTIFIED BY 'password';
例子: CREATE USER 'dog'@'localhost' IDENTIFIED BY '123456';
CREATE USER 'dog2'@'localhost' IDENTIFIED BY '';
PS：username - 你將創(chuàng)建的用戶(hù)名,
host - 指定該用戶(hù)在哪個(gè)主機(jī)上可以登陸草冈，此處的"localhost"，是指該用戶(hù)只能在本地登錄瓮增，不能在另外一臺(tái)機(jī)器上遠(yuǎn)程登錄怎棱，如果想遠(yuǎn)程登錄的話(huà)，將"localhost"改為"%"绷跑，表示在任何一臺(tái)電腦上都可以登錄;也可以指定某臺(tái)機(jī)器可以遠(yuǎn)程登錄;
password - 該用戶(hù)的登陸密碼,密碼可以為空,如果為空則該用戶(hù)可以不需要密碼登陸服務(wù)器拳恋。
二.授權(quán):
命令:GRANT privileges ON databasename.tablename TO 'username'@'host'
PS: privileges - 用戶(hù)的操作權(quán)限,如SELECT , INSERT , UPDATE 等(詳細(xì)列表見(jiàn)該文最后面).如果要授予所的權(quán)限則使用ALL.;databasename - 數(shù)據(jù)庫(kù)名,tablename-表名,如果要授予該用戶(hù)對(duì)所有數(shù)據(jù)庫(kù)和表的相應(yīng)操作權(quán)限則可用*表示, 如*.*.
例子: GRANT SELECT, INSERT ON mq.* TO 'dog'@'localhost';
三.創(chuàng)建用戶(hù)同時(shí)授權(quán)
mysql> grant all privileges on mq.* to test@localhost identified by '1234';
Query OK, 0 rows affected, 1 warning (0.00 sec)
mysql> flush privileges;
Query OK, 0 rows affected (0.01 sec)
PS:必須執(zhí)行flush privileges;
否則登錄時(shí)提示：ERROR 1045 (28000): Access denied for user 'user'@'localhost' (using password: YES )
四.設(shè)置與更改用戶(hù)密碼
命令:SET PASSWORD FOR 'username'@'host' = PASSWORD('newpassword');
例子: SET PASSWORD FOR 'dog2'@'localhost' = PASSWORD("dog");
五.撤銷(xiāo)用戶(hù)權(quán)限
命令: REVOKE privilege ON databasename.tablename FROM 'username'@'host';
說(shuō)明: privilege, databasename, tablename - 同授權(quán)部分.
例子: REVOKE SELECT ON mq.* FROM 'dog2'@'localhost';
PS: 假如你在給用戶(hù)'dog'@'localhost''授權(quán)的時(shí)候是這樣的(或類(lèi)似的):GRANT SELECT ON test.user TO 'dog'@'localhost', 則在使用REVOKE SELECT ON *.* FROM 'dog'@'localhost';命令并不能撤銷(xiāo)該用戶(hù)對(duì)test數(shù)據(jù)庫(kù)中user表的SELECT 操作.相反,如果授權(quán)使用的是GRANT SELECT ON *.* TO 'dog'@'localhost';則REVOKE SELECT ON test.user FROM 'dog'@'localhost';命令也不能撤銷(xiāo)該用戶(hù)對(duì)test數(shù)據(jù)庫(kù)中user表的Select 權(quán)限.
具體信息可以用命令SHOW GRANTS FOR 'dog'@'localhost'; 查看.
六.刪除用戶(hù)
命令: DROP USER 'username'@'host';
七.查看用戶(hù)的授權(quán)
mysql> show grants for dog@localhost;
+---------------------------------------------+
| Grants for dog@localhost |
+---------------------------------------------+
| GRANT USAGE ON *.* TO 'dog'@'localhost' |
| GRANT INSERT ON `mq`.* TO 'dog'@'localhost' |
+---------------------------------------------+
2 rows in set (0.00 sec)
PS:GRANT USAGE:mysql usage權(quán)限就是空權(quán)限，默認(rèn)create user的權(quán)限砸捏，只能連庫(kù)谬运，啥也不能干
