helpful_snippets/MySQL/users.md

101 lines
1.9 KiB
Markdown

# MySQL users actions
## Show users with hosts
```SQL
SELECT User, Host FROM mysql.user;
```
## Check user privileges
```SQL
SHOW GRANTS FOR 'someuser'@'somehost.somedomain';
```
## Create user
```SQL
CREATE USER 'some_user'@'somehost.somedomain' IDENTIFIED BY 'some_password';
FLUSH PRIVILEGES;
```
## Delete user
```SQL
DROP USER 'some_user'@'somehost.somedomain';
FLUSH PRIVILEGES;
```
## Granting privileges
### Grant all privileges
```SQL
GRANT ALL PRIVILEGES ON *.* TO 'some_user'@'somehost.somedomain' WITH GRANT OPTION;
FLUSH PRIVILEGES;
```
### Grant privilege on database 'some_db'
```SQL
GRANT SELECT ON `some_db`.* TO 'some_user'@'somehost.somedomain';
FLUSH PRIVILEGES;
```
### Grant privilege on table 'some_db'.'some_table'
```SQL
GRANT SELECT ON `some_db`.'some_table' TO 'some_user'@'somehost.somedomain';
FLUSH PRIVILEGES;
```
### Grant privilege to select and update some columns on table 'some_db'.'some_table'
```SQL
GRANT SELECT (id, some_column), UPDATE (some_column) ON `some_db`.`some_table` TO 'some_user'@'somehost.somedomain';
```
### Grant with inheritance
```SQL
GRANT SELECT, INSERT, UPDATE, DELETE ON `some_db`.* TO 'some_user'@'somehost' WITH GRANT OPTION;
FLUSH PRIVILEGES;
```
**'WITH GRANT OPTION'** makes it possible to convey to others what is permitted to oneself.
## Revoking privileges
### Revoke privilege to select from database 'somedb'
```SQL
REVOKE SELECT ON `somedb`.* FROM 'someuser'@'somehost';
FLUSH PRIVILEGES;
```
### Revoke all privileges from user
```SQL
ALL PRIVILEGES ON *.* FROM 'someuser'@'somehost';
FLUSH PRIVILEGES;
```
### Revoke all privileges to database 'somedb' from user
```SQL
ALL PRIVILEGES ON `somedb`.* FROM 'someuser'@'somehost';
FLUSH PRIVILEGES;
```
### Revoke all privileges from user
```SQL
REVOKE ALL PRIVILEGES, GRANT OPTION FROM 'someuser'@'somehost';
FLUSH PRIVILEGES;
```
## Change password
```SQL
ALTER USER 'test_user'@'localhost' IDENTIFIED BY 'new_password';
```