ClickHouse-004-sql命令创建用户以及授权

2021/6/27 2:14:35

本文主要是介绍ClickHouse-004-sql命令创建用户以及授权,对大家解决编程问题具有一定的参考价值,需要的程序猿们随着小编来一起学习吧!

## 一、演示环境说明 ClickHouse服务版本是ClickHouse server version 20.8.3.18 ## 二、具体创建用户和授权的sql指令 **ClickHouse创建用户和授权的sql指令语法和MySQL基本相似,但是还是有点不同** 下面直接贴出具体的授权命令方便工作中查看 ``` CREATE USER dba_u HOST LIKE '172.16.0.197' IDENTIFIED WITH sha256_password BY '123456'; 或者 CREATE USER dba_u IDENTIFIED WITH sha256_password BY '123456' HOST LIKE '172.16.0.197'; **授权指令:** grant select,insert,update,delete on test008.* to dba_u WITH GRANT OPTION; ``` ## 三、验证结果 ``` [root@tidb05 ~]# mysql -uwujianwei -h 172.16.0.247 --password=j780UJy9D2tn --port=9004 -e "select * from system.users where name='dba_u';" mysql: [Warning] Using a password on the command line interface can be insecure. +-------+--------------------------------------+-----------------+-----------------+-------------+---------+------------+-------------------+------------------+-------------------+--------------------+----------------------+ | name | id | storage | auth_type | auth_params | host_ip | host_names | host_names_regexp | host_names_like | default_roles_all | default_roles_list | default_roles_except | +-------+--------------------------------------+-----------------+-----------------+-------------+---------+------------+-------------------+------------------+-------------------+--------------------+----------------------+ | dba_u | b1490d93-b115-7a0f-646c-be3c6cbdc983 | local directory | sha256_password | {} | [] | [] | [] | ['172.16.0.197'] | 1 | [] | [] | +-------+--------------------------------------+-----------------+-----------------+-------------+---------+------------+-------------------+------------------+-------------------+--------------------+----------------------+ [root@tidb05 ~]# clickhouse-client -uwujianwei -h 172.16.0.247 --password=j780UJy9D2tn --port=9000 -q "select * from system.users where name='dba_u';" dba_u b1490d93-b115-7a0f-646c-be3c6cbdc983 local directory sha256_password {} [] [] [] ['172.16.0.197'] 1 [] [] tidb06 :) show grants for dba_u; SHOW GRANTS FOR dba_u ┌─GRANTS FOR dba_u─────────────────────────────────────────────────────────────────────────┐ │ GRANT SELECT, INSERT, ALTER UPDATE, ALTER DELETE ON test008.* TO dba_u WITH GRANT OPTION │ └──────────────────────────────────────────────────────────────────────────────────────────┘ 1 rows in set. Elapsed: 0.001 sec. ``` ``` [root@tidb04 ~]# clickhouse-client --user=dba_u -h 172.16.0.247 --password=123456 --port=9000 -q "show databases;" test008 ``` ## 四、创建一个用户可以增删改查 **创建dba_a用户。权限是select,insert,update,delete** ``` [root@tidb06 users.d]# clickhouse-client -udba -m --password=j780UJy9D2tn ClickHouse client version 20.8.3.18. Connecting to localhost:9000 as user dba. Connected to ClickHouse server version 20.8.3 revision 54438. tidb06 :) CREATE USER dba_a IDENTIFIED WITH sha256_password BY '123456' HOST LIKE '172.16.0.197'; tidb06 :) grant select,insert,update,delete on test008.* to dba_a; tidb06 :) show grants for dba_a; SHOW GRANTS FOR dba_a ┌─GRANTS FOR dba_a───────────────────────────────────────────────────────┐ │ GRANT SELECT, INSERT, ALTER UPDATE, ALTER DELETE ON test008.* TO dba_a │ └────────────────────────────────────────────────────────────────────────┘ tidb06 :) select * from system.users where name='dba_a'; SELECT * FROM system.users WHERE name = 'dba_a' ┌─name──┬───────────────────────────────────id─┬─storage─────────┬─auth_type───────┬─auth_params─┬─host_ip─┬─host_names─┬─host_names_regexp─┬─host_names_like──┬─default_roles_all─┬─default_roles_list─┬─default_roles_except─┐ │ dba_a │ f84220ed-456f-648c-18e2-8f30be82b4aa │ local directory │ sha256_password │ {} │ [] │ [] │ [] │ ['172.16.0.197'] │ 1 │ [] │ [] │ └───────┴──────────────────────────────────────┴─────────────────┴─────────────────┴─────────────┴─────────┴────────────┴───────────────────┴──────────────────┴───────────────────┴────────────────────┴──────────────────────┘ ``` **在服务器上会生产sql文件:** ``` [root@tidb06 access]# cat f84220ed-456f-648c-18e2-8f30be82b4aa.sql ATTACH USER dba_a IDENTIFIED WITH sha256_hash BY '8D969EEF6ECAD3C29A3A629280E686CF0C3F5D5A86AFF3CA12020C923ADC6C92' HOST LIKE '172.16.0.197'; ATTACH GRANT SELECT, INSERT, ALTER UPDATE, ALTER DELETE ON test008.* TO dba_a; [root@tidb06 access]# pwd /var/lib/clickhouse/access ``` ``` [root@tidb04 ~]# clickhouse-client --user=dba_a -h 172.16.0.247 --password=123456 --port=9000 -m ClickHouse client version 20.8.3.18. Connecting to 172.16.0.247:9000 as user dba_a. Connected to ClickHouse server version 20.8.3 revision 54438. tidb06 :) show databases; SHOW DATABASES ┌─name────┐ │ test008 │ └─────────┘ tidb06 :) show tables; SHOW TABLES ┌─name───────┐ │ test_table │ └────────────┘ 1 rows in set. Elapsed: 0.002 sec. tidb06 :) select * from test_table; SELECT * FROM test_table Ok. 0 rows in set. Elapsed: 0.002 sec. tidb06 :) INSERT INTO test_table (province, province_name, create_date) VALUES ('山西','太原市','2021-01-25'),('山西','太原市','2021-02-25'); INSERT INTO test_table (province, province_name, create_date) VALUES Ok. 2 rows in set. Elapsed: 0.003 sec. tidb06 :) select * from test_table; SELECT * FROM test_table ┌─province─┬─province_name─┬─create_date─┐ │ 山西 │ 太原市 │ 2020-08-25 │ └──────────┴───────────────┴─────────────┘ ┌─province─┬─province_name─┬─create_date─┐ │ 山西 │ 太原市 │ 2021-02-25 │ └──────────┴───────────────┴─────────────┘ ┌─province─┬─province_name─┬─create_date─┐ │ 山西 │ 太原市 │ 2021-01-25 │ └──────────┴───────────────┴─────────────┘ ``` ## 五、ClickHouse服务默认安装目录下存放文件说明 **/var/lib/clickhouse/metadata/ 存放的是线上所有库的建表sql /var/lib/clickhouse/preprocessed_configs/users.xml 所用的用户的文件都整合到这个文件中了。 /var/lib/clickhouse/access 存放的是线上所有用户的授权的sql** **到此处简单介绍完成,后续会对这一块做进一步的深入测试**

这篇关于ClickHouse-004-sql命令创建用户以及授权的文章就介绍到这儿,希望我们推荐的文章对大家有所帮助,也希望大家多多支持为之网!


扫一扫关注最新编程教程