关键字:
安全;备份恢复权限;、人大金仓、KingbaseES
概述
SYSBACKUP 是 KingbaseES 的一种管理特权,允许物理备份 sys_basebackup 连接到目标数据库,执行物理备份操作。
特性实际操作
首先先加载插件并重启。 shared_preload_libraries = 'backup_pri'
启动功能
\c - system
SHOW backup_pri.enable_backup_pri;
backup_pri.enable_backup_pri
-------------------------------
off
(1 row)
ALTER SYSTEM SET backup_pri.enable_backup_pri to on;
select sys_reload_conf();
SHOW backup_pri.enable_backup_pri;
backup_pri.enable_backup_prih
-------------------------------
t
(1 row)
权限查询的赋予和回收示例
\c - system
create user test;
select * from sys_privilege;
userid | sysbackup
--------+-----------
16401 | f
(1 row)
alter user test sysbackup;
select * from sys_privilege;
userid | sysbackup
--------+-----------
16401 | t
(1 row)
alter user test nosysbackup;
select * from sys_privilege;
userid | sysbackup
--------+-----------
16401 | f
(1 row)
create user test1 sysbackup;
select * from sys_privilege;
userid | sysbackup
--------+-----------
16401 | f
16402 | t
(2 rows)
drop user test;
select * from sys_privilege;
userid | sysbackup
--------+-----------
16402 | t
(1 row)
drop user test1;
select * from sys_privilege;
userid | sysbackup
--------+-----------
(0 rows)
使用经验及注意事项
一般用于物理备份,物理备份时会要求使用此插件。
价值评价
提供物理备份的相关操作
参考资料
《KingbaseES 安全指南》