grant賦予用戶權(quán)限，但是驗(yàn)證不對

cqlouis

mysql> show grants for z1@'localhost';
+------------------------------------------------------------------------+
| Grants for z1@localhost                                                |
+------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'z1'@'localhost' IDENTIFIED BY PASSWORD <secret> |
| GRANT SELECT, INSERT ON `sakila`.* TO 'z1'@'localhost'                 |
+------------------------------------------------------------------------+
2 rows in set (0.00 sec)

mysql> status;
--------------
mysql  Ver 14.14 Distrib 5.6.31, for Linux (x86_64) using  EditLine wrapper

Connection id:                3
Current database:        test
Current user:                z1@localhost
SSL:                        Not in use
Current pager:                stdout
Using outfile:                ''
Using delimiter:        ;
Server version:                5.6.31 MySQL Community Server (GPL)
Protocol version:        10
Connection:                Localhost via UNIX socket
Server characterset:        latin1
Db     characterset:        latin1
Client characterset:        utf8
Conn.  characterset:        utf8
UNIX socket:                /var/lib/mysql/mysql.sock
Uptime:                        10 min 3 sec

Threads: 1  Questions: 36  Slow queries: 0  Opens: 70  Flush tables: 1  Open tables: 63  Queries per second avg: 0.059
--------------



以上說明了我對用戶z1賦予在數(shù)據(jù)庫sakila的權(quán)限，而現(xiàn)在z1在操作數(shù)據(jù)庫test：

mysql> insert into tb1 values (111111111,222222,'mmmmmmmmm');
Query OK, 1 row affected (0.05 sec)

mysql> select * from tb1 order by id desc limit 10;
+-----------+--------+---------------------------------+
| id        | c1     | c2                              |
+-----------+--------+---------------------------------+
| 111111111 | 222222 | mmmmmmmmm                       |
|  10000000 | 111111 | aaaaaaaaaaaaaaaaa               |
|   1000000 |  90217 | testdatatestdatatestdata1000000 |
|    999999 |  80588 | testdatatestdatatestdata999999  |
|    999998 |   4241 | testdatatestdatatestdata999998  |
|    999997 |  80206 | testdatatestdatatestdata999997  |
|    999996 |  98930 | testdatatestdatatestdata999996  |
|    999995 |  71481 | testdatatestdatatestdata999995  |
|    999994 |  52825 | testdatatestdatatestdata999994  |
|    999993 |  64215 | testdatatestdatatestdata999993  |
+-----------+--------+---------------------------------+
10 rows in set (0.00 sec)

mysql>



從以上操作，可以看出，我只給用戶z1賦予了在數(shù)據(jù)庫sakila上面的insert和select權(quán)限，可是實(shí)際上z1卻可以對數(shù)據(jù)庫test里的表tb1進(jìn)行insert操作，


這是怎么會事呢？
謝謝

action08

你肯定是自己哪里錯了，

action08

mysql> status;
--------------
mysql  Ver 14.14 Distrib 5.6.31, for Linux (x86_64) using  EditLine wrapper

Connection id:                3
Current database:        test
Current user:                z1@localhost
SSL:                        Not in use
Current pager:                stdout
Using outfile:                ''
Using delimiter:        ;
Server version:                5.6.31 MySQL Community Server (GPL)
Protocol version:        10
Connection:                Localhost via UNIX socket
Server characterset:        latin1
Db     characterset:        latin1
Client characterset:        utf8
Conn.  characterset:        utf8
UNIX socket:                /var/lib/mysql/mysql.sock
Uptime:                        10 min 3 sec

Threads: 1  Questions: 36  Slow queries: 0  Opens: 70  Flush tables: 1  Open tables: 63  Queries per second avg: 0.059
--------------

seesea2517

回復(fù) 1# cqlouis


    這是 test 庫的默認(rèn)特點(diǎn)，只要能登錄的用戶都有 test 庫的各種權(quán)限。出于安全考慮生產(chǎn)環(huán)境中會刪除 test 庫。相關(guān)配置可以在 mysql.db 看到。