格式:grant 权限 on 数据库名.表名 to 用户@登录主机> grant[英][grɑ:nt] 承认; 同意; 准许; 授予; 例1:允许mk用户从localhost登录
mysql> grant all on book.* to mk1@localhost> #允许访问book数据库下的所有表, 只能访问book表,而且是同一个服务器的用户
允许mk2用户从任意远端主机连接mysql服务器: mysql> grant all privileges on *.* to mk2@'%'> #with grant option意思是mk2用户可以把自己的权限下放给新创建的用户。 另外,加不加privileges都可以。%指的任意远程主机,不包括本地地址和localhost Flush privileges; 刷新数据库
测试: [root@xuegod64 ~]# mysql -u mk2 -h 192.168.1.63 -p123456 mysql>#登录正常 但是: [root@xuegod63 ~]# mysql -u mk2 -h 192.168.1.63 -p123456#不能登录 解决方法:
mysql> grant all privileges on *.* to 'mk2'@'192.168.1.63'>
[root@xuegod63 ~]# mysql -u mk2 -p123456#不能登录 解决方法:
mysql> grant all privileges on *.* to 'mk2'@'localhost'>
只授权部分权限: mysql> grant select,insert,update,delete,create,drop on aa.* to 'custom'@'localhost'>
方法二: 直接修改表中权限文件: mysql> use mysql; mysql> insert into user (Host,User,Password) values('localhost','grace','123456'); mysql> select Host,User,Password from user where User="grace"; +-----------+-------+----------+ | Host | User | Password | +-----------+-------+----------+ | localhost | grace | 123456 | +-----------+-------+----------+ 可以看到密码是明文存放的,现在以加密方式存储: mysql> insert into user (Host,User,Password) values('localhost','grace1',password("123456")); Query OK, 1 row affected, 3 warnings (0.00 sec)
mysql> select Host,User,Password from user where User="grace1"; +-----------+--------+-------------------------------------------+ | Host | User | Password | +-----------+--------+-------------------------------------------+ | localhost | grace1 | *6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9 | +-----------+--------+-------------------------------------------+ 1 row in set (0.01 sec)