人大金仓数据库KingbaseES 备份恢复权限经验总结经验分享

关键字：

安全；备份恢复权限；、人大金仓、KingbaseES

概述

SYSBACKUP 是 KingbaseES 的一种管理特权，允许物理备份 sys_basebackup 连接到目标数据库，执行物理备份操作。

特性实际操作

首先先加载插件并重启。 shared_preload_libraries = 'backup_pri'

启动功能

\c - system

SHOW backup_pri.enable_backup_pri;

backup_pri.enable_backup_pri

-------------------------------

off

(1 row)

ALTER SYSTEM SET backup_pri.enable_backup_pri to on;

select sys_reload_conf();

SHOW backup_pri.enable_backup_pri;

backup_pri.enable_backup_prih

-------------------------------

t

(1 row)

权限查询的赋予和回收示例

\c - system

create user test;

select * from sys_privilege;

userid | sysbackup

--------+-----------

16401 | f

(1 row)

alter user test sysbackup;

select * from sys_privilege;

userid | sysbackup

--------+-----------

16401 | t

(1 row)

alter user test nosysbackup;

select * from sys_privilege;

userid | sysbackup

--------+-----------

16401 | f

(1 row)

create user test1 sysbackup;

select * from sys_privilege;

userid | sysbackup

--------+-----------

16401 | f

16402 | t

(2 rows)

drop user test;

select * from sys_privilege;

userid | sysbackup

--------+-----------

16402 | t

(1 row)

drop user test1;

select * from sys_privilege;

userid | sysbackup

--------+-----------

(0 rows)

使用经验及注意事项

一般用于物理备份，物理备份时会要求使用此插件。

价值评价

提供物理备份的相关操作

参考资料

《KingbaseES 安全指南》