MySQL权限管理

#1.跟权限有关的四张mysql库里面的表
按照权限从大到小排列
user--->db--->table_priv--->columns_priv


#2.只创建新客户端账户密码
create user tom@"客户端的IP地址" identified by "密码";

客户端:192.168.15.13      服务端:192.168.15.90
create user tom@"192.168.15.13" identified by "123";
mysql -utom -p123 -h 192.168.15.90 -P3306

create user tom@"192.168.15.%" identified by "123";
create user tom@"%" identified by "123";


# 3.创建账户并且授权(只有root账号可以为其他账号授权grant)

# *.*==> mysql.user  #对所有都有权限
grant all on *.* to "tom"@"192.168.15.90" identified by "123";   #all代表除了grant以外的所有权限


# db1.* ==> mysql.db #只对db1库有权限
grant all on db1.* to "jack"@"192.168.15.90" identified by "123";


# db1.t1 ==> mysql.table_priv #只对db1.t1表有权限
grant all on db1.t1 to "rose"@"192.168.15.90" identified by "123";


# db1.t1(id) ==> mysql.columns_priv #只对db1.t1表下的id字段,name字段的查看,age字段的修改有权限
grant select (id,name),update (age) on db1.t3 to 'bob'@'localhost' identified by '123';



# 在所有机器上都可以访问服务端的mysql数据库
grant all on *.* to "账户名"@"%" identified by "密码";


#修改完权限一定要
flush privileges;


#删除账户
drop user "tom"@"192.168.15.90";
drop user "jack"@"192.168.15.90";
drop user "rose"@"192.168.15.90";
drop user "bob"@"192.168.15.90";
flush privileges;