SqlServer用户授权配置

 

  1 --创建登录账户
  2 USE [master]
  3 GO
CREATE LOGIN [登录名] WITH PASSWORD=N'密码', DEFAULT_DATABASE=[test], CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF
GO

--删除登录账户(登录名不用引号，'[]'号为必须，防止用户为单纯的数字)
USE [master] 
go
EXEC sys.sp_revokedbaccess  @name_in_db = [登录名]
DROP USER [登录名]
DROP LOGIN [登录名]

--账户角色授权
/*
@rolename枚举值(角色权限)：
                bulkadmin            --可以运行BULK INSERT语句
                dbcreator            --可以创建、修改数据库    
                diskadmin            --用户管理磁盘文件
                processadmin        --可以终止SQL SERVER实例中的进程
                public                --默认且不可修改    
                securityadmin        --管理和审核登录账户
                serveradmin            --可以更改服务器范围的配置选项和关闭服务器
                setupadmin            --配置复制和链接服务器
                sysadmin            --执行任何活动
*/
USE [master] 
go
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'sysadmin'
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'bulkadmin'
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'dbcreator'
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'diskadmin'
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'processadmin'
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'securityadmin'
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'serveradmin'
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'setupadmin'
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'sysadmin'
go

--删除账户角色
USE [master] 
go
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'sysadmin'
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'bulkadmin'
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'dbcreator'
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'diskadmin'
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'processadmin'
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'securityadmin'
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'serveradmin'
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'setupadmin'
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'sysadmin'
go

--用户数据库访问授权
--所有数据库都可以访问
USE [master] 
go
EXEC master..sp_addsrvrolemember @loginame = N'登录名', @rolename = N'sysadmin'
go
--访问制定数据库(删除用户拥有的sysadmin角色，然后为登录用户创建数据库用户映射)
USE [master] 
go
EXEC master..sp_dropsrvrolemember @loginame = N'登录名', @rolename = N'sysadmin'
go
USE databasename
go
create user [登录名] for login [登录名] with default_schema=dbo --此时还不可访问该数据库的对象如表、存储过程、视图等
go

--设置登录用户访问该数据库的所有对象
USE databasename
go
exec sp_addrolemember 'db_owner', '登录名' 
go

--禁用登录用户访问该数据库的所有对象
USE test
go
exec sp_droprolemember 'db_owner', '登录名' 
go

--授权登录用户访问指定的表存储过程视图等(先禁用数据库用户拥有的db_owner角色，然后再对制定的对象赋相应的权限)
/*
对象(表|存储过程|视图等)枚举值：
            ALTER            --修改
            CONTROL            --控制    
            EXECUTE            --执行
            TAKE OWNERSHIP        --所有权限
            VIEW DEFINITION                --查看定义
*/
USE test
go
exec sp_droprolemember 'db_owner', '登录名' 
go
use test
go
GRANT ALTER ON [dbo].[表|存储过程|视图等名称] TO [登录名]
GRANT CONTROL ON [dbo].[表|存储过程|视图等名称] TO [登录名]
GRANT EXECUTE ON [dbo].[表|存储过程|视图等名称] TO [登录名]
GRANT TAKE OWNERSHIP ON [dbo].[表|存储过程|视图等名称] TO [登录名]
GRANT VIEW DEFINITION ON [dbo].[表|存储过程|视图等名称] TO [登录名]
go

--删除对登录用户访问指定的表存储过程视图等的授权
use test
go
REVOKE ALTER ON [dbo].[表|存储过程|视图等名称] TO [登录名]
REVOKE CONTROL ON [dbo].[表|存储过程|视图等名称] TO [登录名]
REVOKE EXECUTE ON [dbo].[表|存储过程|视图等名称] TO [登录名]
REVOKE TAKE OWNERSHIP ON [dbo].[表|存储过程|视图等名称] TO [登录名]
REVOKE VIEW DEFINITION ON [dbo].[表|存储过程|视图等名称] TO [登录名]
go

--授权登录用户访问表的指定列
use test
go
GRANT SELECT ON dbo.表名(字段1,字段2...) TO [登录名]
go

--批量删除数据库所有表
use databasename
go
DECLARE @DROP_STRING VARCHAR(8000)
--删除外键约束
DECLARE DROP_FK CURSOR FOR
SELECT  'ALTER TABLE '+ OBJECT_NAME(PARENT_OBJ) + ' DROP CONSTRAINT '+NAME
FROM    SYSOBJECTS
WHERE   XTYPE = 'F'
OPEN DROP_FK
FETCH NEXT FROM DROP_FK INTO @DROP_STRING
WHILE(@@FETCH_STATUS=0)
BEGIN     EXEC(@DROP_STRING)     FETCH NEXT FROM DROP_FK INTO @DROP_STRING
END
CLOSE DROP_FK
DEALLOCATE DROP_FK
--删除表
DECLARE DROP_TABLE CURSOR FOR
SELECT  'DROP TABLE '+NAME
FROM    SYSOBJECTS
WHERE   XTYPE = 'U'
OPEN DROP_TABLE
FETCH NEXT FROM DROP_TABLE INTO @DROP_STRING
WHILE(@@FETCH_STATUS=0)
BEGIN     EXEC(@DROP_STRING)     FETCH NEXT FROM DROP_TABLE INTO @DROP_STRING
END
CLOSE DROP_TABLE
DEALLOCATE DROP_TABLE
GO