MySQL的权限管理设置方法

-- 查看当前用户的全部权限
SHOW GRANTS;

+------------------------------------------------------------------+
| Grants for 'app_user'@'%'                                        |
+------------------------------------------------------------------+
| GRANT USAGE ON *.* TO `app_user`@`%`                             |
| GRANT SELECT, INSERT, UPDATE ON `shop_db`.* TO `app_user`@`%`    |
+------------------------------------------------------------------+

-- 查看当前会话使用的账号
SELECT USER();          -- 你登录时用的账号（如 'app_user'@'192.168.1.50'）
SELECT CURRENT_USER();  -- MySQL 实际用于权限校验的账号（如 'app_user'@'%'）

-- 检查是否对某个库有 SELECT 权限
SELECT 
  TABLE_SCHEMA AS database_name,
  PRIVILEGE_TYPE
FROM INFORMATION_SCHEMA.SCHEMA_PRIVILEGES
WHERE GRANTEE = CONCAT('''', REPLACE(CURRENT_USER(), '@', '''@'''), '''')
  AND PRIVILEGE_TYPE = 'SELECT';

mysql -u root -p

-- 授予 app_user 对 shop_db 库的 增删改查 权限
GRANT SELECT, INSERT, UPDATE, DELETE ON shop_db.* TO 'app_user'@'%';
-- 刷新权限（MySQL 8.0+ 通常不需要，但安全起见可加）
FLUSH PRIVILEGES;

GRANT SELECT ON shop_db.* TO 'readonly_user'@'192.168.1.%';

GRANT ALL PRIVILEGES ON shop_db.* TO 'admin_user'@'localhost';

GRANT SELECT ON shop_db.* TO 'user'@'%' WITH GRANT OPTION;

GRANT 权限列表 ON 数据库.表 TO '用户名'@'主机';

SHOW GRANTS FOR 'app_user'@'%';

-- 撤销 app_user 的 DELETE 权限
REVOKE DELETE ON shop_db.* FROM 'app_user'@'%';
-- 撤销所有权限
REVOKE ALL PRIVILEGES, GRANT OPTION FROM 'app_user'@'%';

GRANT SELECT (name, email) ON shop_db.users TO 'user'@'%';