openGauss每日一练第5天|用户的创建、修改、更改权限与删除操作

openGauss每日一练第5天的内容是用openGauss创建用户、修改用户属性、更改用户权限和删除用户。

课程学习

1.创建用户

• 以下两种设置密码方法等效

CREATE USER jim PASSWORD 'abcd@123';
CREATE USER kim IDENTIFIED BY 'abcd@456';

• 用户dim具有创建数据库权限

CREATE USER dim CREATEDB PASSWORD 'abcd@789';

• 查看用户

\du

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 dim       | Create DB                                                                                              
          | {}
 gaussdb   | Sysadmin                                                                                               
          | {}
 jim       |                                                                                                        
          | {}
 kim       |                                                                                                        
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}

2.修改用户属性

• 修改密码

ALTER USER jim IDENTIFIED BY 'Abcd@123' REPLACE 'abcd@123';

• 为用户jim增加CREATEROLE权限

ALTER USER jim CREATEROLE;

查看用户

\du

omm=# \du 
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 dim       | Create DB                                                                                              
          | {}
 gaussdb   | Sysadmin                                                                                               
          | {}
 jim       | Create role                                                                                            
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}

 kim       |                                                                                                        
          | {}

3.授权

• 将用户jim的权限授权给用户kim

GRANT jim to kim;

• 将sysadmin权限授权给用户dim

GRANT ALL PRIVILEGES TO dim;

• 重命名用户dim

alter user dim rename to tim;

• 查看用户

\du

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 gaussdb   | Sysadmin                                                                                               
          | {}
 jim       | Create role                                                                                            
          | {}          | {jim}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}
 kim       |                                                                                                        
 tim       | Create DB, Sysadmin                                                                                    
          | {}

4.回收权限

• 撤消kim的权限

REVOKE jim FROM kim;

• 撤消用户dim的sysadmin权限

revoke all privilege from tim;

• 查看用户

\du

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 gaussdb   | Sysadmin                                                                                               
          | {}
 jim       | Create role                                                                                            
          | {}
 kim       |                                                                                                        
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}
 tim       | Create DB                                                                                              
          | {}

5.删除用户

drop user tim;
drop user jim;
drop user kim;

课程作业

1.创建用户user1、user2和user3，user1具有CREATEROLE权限，user2具有CREATEDB权限，要求使用两种不同的方法设置密码

create user user1 createrole identified by 'abcd@123';
create user user2 createdb identified by 'abcd@456';
create user user3 identified by 'abcd@789';

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 gaussdb   | Sysadmin                                                                                               
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}
 user1     | Create role                                                                                            
          | {}
 user2     | Create DB                                                                                              
          | {}
 user3     |                                                                                                        
          | {}

2.修改用户user1的密码

alter user user1 identified by 'abcd@123123' replace 'abcd@123';

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 gaussdb   | Sysadmin                                                                                               
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}
 user1     | Create role                                                                                            
          | {}
 user2     | Create DB                                                                                              
          | {}
 user3     |                                                                                                        
          | {}

3.重命名用户user2

alter user user2 rename to user22;

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------

 user3     |                                                                                                        
          | {}
 gaussdb   | Sysadmin                                                                                               
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}
 user1     | Create role                                                                                            
          | {}
 user22    | Create DB                                                                                              
          | {}

4.将用户user1的权限授权给用户user3，再回收用户user3的权限

grant user1 to user3;

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 gaussdb   | Sysadmin                                                                                               
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}
 user22    | Create DB                                                                                              
          | {}
 user3     |                                                                                                        
          | {user1} user1     | Create role                                                                                            
          | {}

revoke user1 from user3;

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 gaussdb   | Sysadmin                                                                                               
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}
 user1     | Create role                                                                                            
          | {}
 user22    | Create DB                                                                                              
          | {}

 user3     |                                                                                                        
          | {}

5.删除所有创建用户

drop user user1;
drop user user22;
drop user user3;

omm=# \du
                                                              List of roles
 Role name |                                                    Attributes                                          
          | Member of 
-----------+--------------------------------------------------------------------------------------------------------
----------+-----------
 gaussdb   | Sysadmin                                                                                               
          | {}
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadm
in, UseFT | {}