MySQL 用戶管理之 REVOKE 撤銷受權

基礎語法

須要有 GRANT OPTION 權限或 mysql 系統表的 UPDATE 權限。

REVOKE ALL ON *.* FROM 'finley'@'%.example.com';

REVOKE INSERT ON *.* FROM 'jeffrey'@'localhost';

REVOKE 'role1', 'role2' FROM 'user1'@'localhost', 'user2'@'localhost';

REVOKE SELECT ON world.* FROM 'role3';

撤銷全局權限

須要有 CREATE USER 權限或 mysql 系統表的 UPDATE 權限。

REVOKE ALL PRIVILEGES, GRANT OPTION FROM user_or_role [, user_or_role] ...

撤銷數據庫權限

REVOKE INSERT, UPDATE ON db1.* FROM 'jeffrey'@'localhost';

查看權限

mysql> SHOW GRANTS FOR 'someuser'@'somehost';
+-------------------------------------------------------+
| Grants for admin@localhost                            |
+-------------------------------------------------------+
| GRANT RELOAD, PROCESS ON *.* TO 'someuser'@'somehost' |
+-------------------------------------------------------+

查看用戶

mysql> SET print_identified_with_as_hex = ON;
mysql> SHOW CREATE USER 'admin'@'localhost'\G
*************************** 1. row ***************************
CREATE USER for admin@localhost: CREATE USER 'admin'@'localhost'
IDENTIFIED WITH 'caching_sha2_password'
AS 0x24412430303524301D0E17054E2241362B1419313C3E44326F294133734B30792F436E77764270373039612E32445250786D43594F45354532324B6169794F47457852796E32
REQUIRE NONE PASSWORD EXPIRE DEFAULT ACCOUNT UNLOCK
PASSWORD HISTORY DEFAULT
PASSWORD REUSE INTERVAL DEFAULT
PASSWORD REQUIRE CURRENT DEFAULT