MariaDB/SQL/GRANT: Difference between revisions

Latest revision as of 01:59, 26 April 2026

[[../REVOKE|REVOKE]] negates privileges granted by GRANT.
[[../SHOW GRANTS|SHOW GRANTS]] lists privileges granted by GRANT. (see [[../SHOW|SHOW]])

GRANT ALL ON `roundcube`.* to 'rc-bot'@localhost;
GRANT ALL PRIVILEGES ON `woozdev-mw`.* TO 'wooz-dev-mw'@'localhost' IDENTIFIED BY '<password>';

GRANT <priv list> ON <object type> <priv level> TO <user spec> [ <user options> ]
- <priv list>: <priv_type> [ <column_list> ] [, repeat...]
- <priv_type>: one of –
  - USAGE
  - ALL [PRIVILEGES]
- <object type>: one of –
  - TABLE
  - FUNCTION
  - PROCEDURE
  - PACKAGE
  - PACKAGE BODY
- <priv level>: one of –
  - *
  - *.*
  - <db_name>.*
  - <db_name>.<tbl_name>
  - <tbl_name>
  - <db_name>.<routine_name>
- <user spec>: one of –
  - <username> [ <authentication option> ]
  - PUBLIC
- <authentication option>: one of –
  - IDENTIFIED BY '<password>'
  - IDENTIFIED BY PASSWORD 'password_hash'
  - IDENTIFIED {VIA|WITH} <authentication rule> [OR repeat...]
- <user option>: one of –
  - REQUIRE {NONE | <TLS option> [[AND] repeat...]
  - [WITH <with option> [repeat...]
- <with option>: one of –
  - GRANT OPTION
  - <resource_option>
GRANT <rolename> TO <grantee> [, repeat...] [WITH ADMIN OPTION]
- <grantee>: one of –
  - <rolename>
  - <username> [ <authentication option> ]

@@ Line 2: / Line 2: @@
 * <code>{{l/same|REVOKE}}</code> negates privileges granted by <code>GRANT</code>.
 * <code>{{l/same|SHOW GRANTS}}</code> lists privileges granted by <code>GRANT</code>. (see <code>{{l/same|SHOW}}</code>)
+==Reference==
+* [https://mariadb.com/kb/en/grant/ MariaDB Knowledge Base]
+==Example==
+* <syntaxhighlight inline lang=SQL>GRANT ALL ON `roundcube`.* to 'rc-bot'@localhost;</syntaxhighlight>
+* <syntaxhighlight inline lang=SQL>GRANT ALL PRIVILEGES ON `woozdev-mw`.* TO 'wooz-dev-mw'@'localhost' IDENTIFIED BY '</syntaxhighlight>{{arg|password}}<code>'</code>;
 ==Syntax==
 * <code>GRANT</code> {{fmt/arg|priv list}} <code>ON</code> {{fmt/arg|object type}} {{fmt/arg|priv level}} <code>TO</code> {{fmt/arg|user spec}} [ {{fmt/arg|user options}} ]