数据库安全管理

一、创建登录用户

--创建WINDOW登录帐户

exec sp_grantlogin 'LENOVO-PC\winLogin'

 

--删除WINDOW登录帐户

--sp_revokelogin

 

--创建SQL登录帐户

exec sp_addlogin saa,'123'

create login saa with password='123'

 

--删除SQL登录帐户

exec sp_droplogin saa

drop  login saa

 

--为saa用户添加CREATE DATABASE,CREATE TABLE库权限

grant CREATE DATABASE, create table to saa

 

--drop database DB_test

 

create database DB_test

go

use DB_test

go

create table student

(

stuno char(6) primary key,

stuname varchar(20),

stusex char(2),

stuage smallint,

stuSeat int,

stuaddress varchar(50)

)

go

create table score

(

scoreno char(7),

stuno char(6),

writtenscore smallint,

labscore smallint

)

go

insert into student

select 's00001','钟正阳','男',18,1,'北京海淀' UNION

SELECT 's00002','邱哲琰','男',31,3,'地址不详' UNION

SELECT 's00003','徐子墨','女',22,2,'河南洛阳' UNION

SELECT 's00004','高昀熠','男',28,4,'江苏常州' UNION

SELECT 's00008','霍艳红','女',23,5,'地址不详'

GO

 

INSERT INTO score

SELECT 'SC00001','s25303',80,58 UNION

SELECT 'SC00003','s25302',60,90 UNION

SELECT 'SC00006','s25301',77,82

GO

 

二、创建数据库用户

注意：以下代码在哪个数据库下执行，则就为此登录帐户

在此数据库下创建了相应的数据库用户

use DB_test

go

exec sp_grantdbaccess 'root','123'

 

use DB_test

go

create user root for login saa with default_schema=stu

 

删除数据库用户

use DB_test

go

sp_revokedbaccess 'root'

 

三、为数据库用户授权

grant select insert，update on DB_test to root

 

收回权限

revoke update on DB_test to root

 

禁止用户使用权限

deny update on score to saa --禁止saa用户对score表的update权限