數(shù)據(jù)控制語(yǔ)言語(yǔ)句可以進(jìn)行安全性管理,確定哪些用戶可以查看或修改數(shù)據(jù),這些語(yǔ)句包括GRANT、DENY、REVOKE等。
1.GRANT語(yǔ)句
GRANT語(yǔ)句是授權(quán)語(yǔ)句,它可以把語(yǔ)句許可或者對(duì)象許可授予其他用戶和角色。允許用戶對(duì)數(shù)據(jù)庫(kù)進(jìn)行某些操作的GRANT語(yǔ)句的語(yǔ)法形式如下。
(1)語(yǔ)句許可
GRANT {ALL | statement[,...n]}
TO security_account[,...n]
Statement代表語(yǔ)句許可的類型,可以是以下的類型:
CREATE DATABASE:創(chuàng)建數(shù)據(jù)庫(kù)語(yǔ)句
CREATE DEFAULT:創(chuàng)建默認(rèn)對(duì)象語(yǔ)句
CREATE PROCEDURE:創(chuàng)建存儲(chǔ)過(guò)程語(yǔ)句
CREATE RULE:創(chuàng)建規(guī)則對(duì)象語(yǔ)句
CREATE TABLE:創(chuàng)建表語(yǔ)句
CREATE VIEW:創(chuàng)建視圖語(yǔ)句
BACKUP DATABASE:備份數(shù)據(jù)庫(kù)語(yǔ)句
BACKUP LOG:備份日志語(yǔ)句
(2)對(duì)象許可
GRANT{ALL [PRIVILEGES] | permission[,...n] }
{
[ (Column[,...n])] ON {table | view}
| ON {table | view}[(column[,...n])]
| ON {stored_procedure | extended_procedure}
}
TO security_account[,...n]
[WITH GRANT OPTION]
[AS {group | role}]
下面是一個(gè)實(shí)例,打開(kāi)數(shù)據(jù)庫(kù)game,然后對(duì)gamer角色授予author表的SELECT許可,允許gamer角色進(jìn)行數(shù)據(jù)庫(kù)檢索。接著對(duì)三個(gè)用戶授予INSERT、DELETE和UPDATE許可。最后,授予teacher角色CREATE TABLE語(yǔ)句許可。
USE game
GO
GRANT SELECT
ON author
TO gamer
GO
GRANT INSERT,DELETE,UPDATE
ON author
TO Mike,Henry,Ronald
GO
GRANT CREATE TABLE
TO teacher
GO
1.GRANT語(yǔ)句
GRANT語(yǔ)句是授權(quán)語(yǔ)句,它可以把語(yǔ)句許可或者對(duì)象許可授予其他用戶和角色。允許用戶對(duì)數(shù)據(jù)庫(kù)進(jìn)行某些操作的GRANT語(yǔ)句的語(yǔ)法形式如下。
(1)語(yǔ)句許可
GRANT {ALL | statement[,...n]}
TO security_account[,...n]
Statement代表語(yǔ)句許可的類型,可以是以下的類型:
CREATE DATABASE:創(chuàng)建數(shù)據(jù)庫(kù)語(yǔ)句
CREATE DEFAULT:創(chuàng)建默認(rèn)對(duì)象語(yǔ)句
CREATE PROCEDURE:創(chuàng)建存儲(chǔ)過(guò)程語(yǔ)句
CREATE RULE:創(chuàng)建規(guī)則對(duì)象語(yǔ)句
CREATE TABLE:創(chuàng)建表語(yǔ)句
CREATE VIEW:創(chuàng)建視圖語(yǔ)句
BACKUP DATABASE:備份數(shù)據(jù)庫(kù)語(yǔ)句
BACKUP LOG:備份日志語(yǔ)句
(2)對(duì)象許可
GRANT{ALL [PRIVILEGES] | permission[,...n] }
{
[ (Column[,...n])] ON {table | view}
| ON {table | view}[(column[,...n])]
| ON {stored_procedure | extended_procedure}
}
TO security_account[,...n]
[WITH GRANT OPTION]
[AS {group | role}]
下面是一個(gè)實(shí)例,打開(kāi)數(shù)據(jù)庫(kù)game,然后對(duì)gamer角色授予author表的SELECT許可,允許gamer角色進(jìn)行數(shù)據(jù)庫(kù)檢索。接著對(duì)三個(gè)用戶授予INSERT、DELETE和UPDATE許可。最后,授予teacher角色CREATE TABLE語(yǔ)句許可。
USE game
GO
GRANT SELECT
ON author
TO gamer
GO
GRANT INSERT,DELETE,UPDATE
ON author
TO Mike,Henry,Ronald
GO
GRANT CREATE TABLE
TO teacher
GO