MySQL 5.7的角色功能

MySQL 5.7的角色功能：

创建用户并授予用户角色功能：

mysql> create user 'junior'@'127.0.0.1' identified by '123';

Query OK, 0 rows affected (0.01 sec)

mysql> create user 'tom'@'127.0.0.1' identified by '123';

Query OK, 0 rows affected (0.00 sec)

mysql> create user 'jim'@'127.0.0.1' identified by '123';

Query OK, 0 rows affected (0.01 sec)

mysql> grant proxy on 'junior'@'127.0.0.1' to 'tom'@'127.0.0.1';

Query OK, 0 rows affected (0.01 sec)

mysql> grant proxy on 'junior'@'127.0.0.1' to 'jim'@'127.0.0.1';

Query OK, 0 rows affected (0.00 sec)

mysql> grant select on *.* to 'junior'@'127.0.0.1';

Query OK, 0 rows affected (0.00 sec)

mysql> show grants for 'junior'@'127.0.0.1';

+---------------------------------------------+

| Grants for junior@127.0.0.1                 |

+---------------------------------------------+

| GRANT SELECT ON *.* TO 'junior'@'127.0.0.1' |

+---------------------------------------------+

1 row in set (0.00 sec)

mysql> show grants for 'jim'@'127.0.0.1';

+----------------------------------------------------------+

| Grants for jim@127.0.0.1                                 |

+----------------------------------------------------------+

| GRANT USAGE ON *.* TO 'jim'@'127.0.0.1'                  |

| GRANT PROXY ON 'junior'@'127.0.0.1' TO 'jim'@'127.0.0.1' |

+----------------------------------------------------------+

2 rows in set (0.00 sec)

mysql> show grants for 'tom'@'127.0.0.1';

+----------------------------------------------------------+

| Grants for tom@127.0.0.1                                 |

+----------------------------------------------------------+

| GRANT USAGE ON *.* TO 'tom'@'127.0.0.1'                  |

| GRANT PROXY ON 'junior'@'127.0.0.1' TO 'tom'@'127.0.0.1' |

+----------------------------------------------------------+

2 rows in set (0.00 sec)

mysql> use mysql;

Reading table information for completion of table and column names

You can turn off this feature to get a quicker startup with -A

Database changed

mysql> select * from proxies_priv;

+-----------+------+--------------+--------------+------------+----------------------+---------------------+

| Host      | User | Proxied_host | Proxied_user | With_grant | Grantor              | Timestamp           |

+-----------+------+--------------+--------------+------------+----------------------+---------------------+

| localhost | root |              |              |          1 | boot@connecting host | 0000-00-00 00:00:00 |

| 127.0.0.1 | tom  | 127.0.0.1    | junior       |          0 | root@localhost       | 0000-00-00 00:00:00 |

| 127.0.0.1 | jim  | 127.0.0.1    | junior       |          0 | root@localhost       | 0000-00-00 00:00:00 |

+-----------+------+--------------+--------------+------------+----------------------+---------------------+

3 rows in set (0.00 sec)