Mysql权限规范

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| performance_schema |
| quartz             |
| zjzc               |
+--------------------+
5 rows in set (0.02 sec)


mysql> show create database quartz;
+----------+-----------------------------------------------------------------+
| Database | Create Database                                                 |
+----------+-----------------------------------------------------------------+
| quartz   | CREATE DATABASE `quartz` /*!40100 DEFAULT CHARACTER SET utf8 */ |
+----------+-----------------------------------------------------------------+
1 row in set (0.00 sec)


mysql> show create database zjzc;
+----------+---------------------------------------------------------------+
| Database | Create Database                                               |
+----------+---------------------------------------------------------------+
| zjzc     | CREATE DATABASE `zjzc` /*!40100 DEFAULT CHARACTER SET utf8 */ |
+----------+---------------------------------------------------------------+
1 row in set (0.00 sec)



mysql> select Host,user from  mysql.user;
+----------------+---------------+
| Host           | user          |
+----------------+---------------+
| %              | query_all     |
| %              | query_dev     |
| %              | root          |
| %              | zjzc_dba      |
| %              | zjzc_limit_cn |
| 10.171.243.55  | quartz_app    |
| 10.171.243.55  | zjzc_app      |
| 10.252.148.164 | quartz_app    |
| 10.252.148.164 | zjzc_app      |
| 127.0.0.1      | root          |
| ::1            | root          |
| jrhdpt01       | root          |
| localhost      | root          |
+----------------+---------------+
13 rows in set (0.03 sec)




中均这边使用的mysql数据库用户为:
zjzc_app ,quartz_app 


mysql> show GRANTS for 'quartz_app'@'10.171.243.55';
+-----------------------------------------------------------------------------------------------------------------------+
| Grants for quartz_app@10.171.243.55                                                                                   |
+-----------------------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'quartz_app'@'10.171.243.55' IDENTIFIED BY PASSWORD '*F93A9C0200A3EF0A1C401E02B35142AEB8E0B8CD' |
| GRANT ALL PRIVILEGES ON `quartz`.* TO 'quartz_app'@'10.171.243.55'                                                    |
+-----------------------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)


mysql> show GRANTS for 'quartz_app'@'10.252.148.164';
+------------------------------------------------------------------------------------------------------------------------+
| Grants for quartz_app@10.252.148.164                                                                                   |
+------------------------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'quartz_app'@'10.252.148.164' IDENTIFIED BY PASSWORD '*F93A9C0200A3EF0A1C401E02B35142AEB8E0B8CD' |
| GRANT ALL PRIVILEGES ON `quartz`.* TO 'quartz_app'@'10.252.148.164'                                                    |
+------------------------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)



mysql> show GRANTS for 'zjzc_app'@'10.252.148.164';
+----------------------------------------------------------------------------------------------------------------------+
| Grants for zjzc_app@10.252.148.164                                                                                   |
+----------------------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'zjzc_app'@'10.252.148.164' IDENTIFIED BY PASSWORD '*6AC5E71C51484F1CC759EA9E254C573E67F23AB5' |
| GRANT ALL PRIVILEGES ON `zjzc`.* TO 'zjzc_app'@'10.252.148.164'                                                      |
+----------------------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)


USAGE: 特殊的 "无权限" 权限。

mysql> show GRANTS for 'test100'@'%';
+--------------------------------------------------------------------------------------------------------+
| Grants for test100@%                                                                                   |
+--------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'test100'@'%' IDENTIFIED BY PASSWORD '*6A7A490FB9DC8C33C2B025A91737077A7E9CC5E5' |
+--------------------------------------------------------------------------------------------------------+
1 row in set (0.00 sec)


USAGE权限 只允许登录--其它什么也不允许做。