openGauss每日一练第五天

openGauss每日一练第五天

学习地址

https://www.modb.pro/course/133

学习目标

学习openGauss创建用户、修改用户属性、更改用户权限和删除用户

用户是用来登录数据库的，通过对用户赋予不同的权限，可以方便地管理用户对数据库的访问及操作

课程作业

过程中使用\du或\du+查看用户信息

1.创建用户user1、user2和user3，user1具有CREATEROLE权限，user2具有CREATEDB权限，要求使用两种不同的方法设置密码

SQL文本：
create user user1 createrole password 'user1_123';
create user user2 createdb identified by 'user2_123';
create user user3 password 'user3_123';
\du+

omm=# create user user1 createrole password 'user1_123';
CREATE ROLE
omm=# create user user2 createdb identified by 'user2_123';
CREATE ROLE
omm=# create user user3 password 'user3_123';
CREATE ROLE
omm=# \du+
                                                                     List of roles
 Role name |                                                    Attributes                                                    | Member of | Description 
-----------+------------------------------------------------------------------------------------------------------------------+-----------+-------------
 lizi      | Create role, Create DB, Replication, Administer audit, Sysadmin, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 user1     | Create role                                                                                                      | {}        | 
 user2     | Create DB                                                                                                        | {}        | 
 user3     |                                                                                                                  | {}        | 

omm=# 

2.修改用户user1的密码

SQL文本：
alter user user1 identified by 'user1_456' replace 'user1_123';
或者
alter user user1 password 'user1_789' ;

omm=# alter user user1 identified by 'user1_456' replace 'user1_123';
ALTER ROLE
omm=# alter user user1 password 'user1_789' ;
ALTER ROLE
omm=# \du+
                                                                     List of roles
 Role name |                                                    Attributes                                                    | Member of | Description 
-----------+------------------------------------------------------------------------------------------------------------------+-----------+-------------
 lizi      | Create role, Create DB, Replication, Administer audit, Sysadmin, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 user1     | Create role                                                                                                      | {}        | 
 user2     | Create DB                                                                                                        | {}        | 
 user3     |                                                                                                                  | {}        | 

omm=# 

3.重命名用户user2

SQL文本：
alter user user2 rename to user222;
\du+

omm=# alter user user2 rename to user222;
ALTER ROLE
omm=# \du+
                                                                     List of roles
 Role name |                                                    Attributes                                                    | Member of | Description 
-----------+------------------------------------------------------------------------------------------------------------------+-----------+-------------
 lizi      | Create role, Create DB, Replication, Administer audit, Sysadmin, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 user1     | Create role                                                                                                      | {}        | 
 user222   | Create DB                                                                                                        | {}        | 
 user3     |                                                                                                                  | {}        | 

omm=# 

4.将用户user1的权限授权给用户user3，再回收用户user3的权限

SQL文本：
grant user1 to user3;
\du+
revoke all privilege from user3;
\du+

omm=# grant user1 to user3;
GRANT ROLE
omm=# \du+
                                                                     List of roles
 Role name |                                                    Attributes                                                    | Member of | Description 
-----------+------------------------------------------------------------------------------------------------------------------+-----------+-------------
 lizi      | Create role, Create DB, Replication, Administer audit, Sysadmin, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 user1     | Create role                                                                                                      | {}        | 
 user222   | Create DB                                                                                                        | {}        | 
 user3     |                                                                                                                  | {user1}   | 

omm=# revoke all privilege from user3;
ALTER ROLE
omm=# \du+
                                                                     List of roles
 Role name |                                                    Attributes                                                    | Member of | Description 
-----------+------------------------------------------------------------------------------------------------------------------+-----------+-------------
 lizi      | Create role, Create DB, Replication, Administer audit, Sysadmin, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 user1     | Create role                                                                                                      | {}        | 
 user222   | Create DB                                                                                                        | {}        | 
 user3     |                                                                                                                  | {user1}   | 

omm=# 

5.删除所有创建用户

SQL文本：
drop user user1;
drop user user222;
drop user user3;
\du+

omm=# drop user user1;
DROP ROLE
omm=# drop user user222;
DROP ROLE
omm=# drop user user3;
DROP ROLE
omm=# \du+
                                                                     List of roles
 Role name |                                                    Attributes                                                    | Member of | Description 
-----------+------------------------------------------------------------------------------------------------------------------+-----------+-------------
 lizi      | Create role, Create DB, Replication, Administer audit, Sysadmin, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 
 omm       | Sysadmin, Create role, Create DB, Replication, Administer audit, Monitoradmin, Operatoradmin, Policyadmin, UseFT | {}        | 

omm=#