当前位置:网站首页>How to manage the authority of database account?
How to manage the authority of database account?
2020-11-06 21:19:00 【Jack088】
How to achieve the fine management of database account authority ?
@ Li Qianhong
According to the responsibilities of employees , Sub authority . You can plan a table for yourself , What kind of authority does each department of the company need , What rights does everyone need .( Generally speaking , Give some general accounts ) People who don't need to be given . If a particular leader or employee needs a certain authority , You need to apply to the management department , Indicate what it is , What is the effect of doing this , When to use , When it's not used , Remember to take it back on time .
@ Wen guobing
What is refinement , It must be the full control of authority . Let me share my experience .
First of all , Depending on the type of account , Distinguish by prefix . Simple classification , It is divided into business account and real name account . In terms of subdivision , Business accounts are divided into website applications 、 Mobile phone application 、 Report application 、 Service application 、 Query service , Real name accounts can be traced to specific employees .
Web application (web_ Business abbreviation )
Mobile phone application (mob_ Business abbreviation )
Report application (rep_ Business abbreviation )
Service application (dae_ Business abbreviation )
Query service (sea_ Business abbreviation )
Real name query (dev_ Name Pinyin )
second , The business account permission is up to SELECT、UPDATE、DELETE and INSERT, Query service and real name query account can only have query authority . Each user has only one password , You need to know whether the user exists when you authorize , If there is , Use the old password to authorize , If it doesn't exist , Generate random password for authorization .
Third , Real name permission can only be queried by fortress machine or springboard machine , Bastion machine has user login and execution SQL journal .
Fourth , on-line IDC Databases are only allowed online Web Machine connection , The tester is not allowed to connect to .
The fifth , Employees need to apply for work order for permission , Authorization can only DBA operation .DBA Need to do a good job in authority control , The person in charge of relevant business can apply for higher authority , But it needs to be copied by email to the higher level leaders for approval .
The sixth ,DBA There's a complete metabase , It records all the user related information , This database has the highest level of importance , Do a good job in safety control .
The seventh , The user's password needs to be complex enough , And there is a complete set of random password generation rules .
The eighth , The business side notifies that the business account is abnormal , There needs to be a process to quickly change accounts .
The ninth , Temporary high authority account number applied by the employee , There needs to be a record , Need to set password expiration time , And you need to develop a recycling process .
The first ten ,MySQL root The code is only DBA Have , And it is not allowed to save this password on any cloud notes or cloud storage , Can only be saved locally . in addition , Regular modification MySQL root password .
The eleventh , Enter through the terminal MySQL, It is not allowed to display the password in clear text .
twelfth , User authorization is recommended in Web Page completion , Safety control is needed . That is to say DB Operation and maintenance management platform , Need to code to implement .
thirteenth , Do a good job of data backup , The fastest way to recover data is through data manipulation .
fourteenth , If possible , Go online in a new business MySQL Audit program , Can pass init-connect Parameters + access_log + binlog Achieve audit .
above .
@ Han Chengliang
The two above are already very detailed , About refinement , The main reason is that each authority is assigned carefully , Achieve , No repetition , Secondly, the definition of authority is clear , What authority should be given to what authority , There are no fuzzy permissions , Finally, the record of authority , Start with authority , The examination and approval , to grant authorization , Take back , Delete and so on a whole set of rules and procedures , The most important thing is a refined idea , Know what you know .
@mountainsun
In terms of specific databases DB2 It is more difficult to achieve a very fine account management , because DB2 All users are operating system users , In the actual production system , It is generally impossible for us to build many users on the system . and ORACLE and MYSQL It's the user who uses the database , It is possible to allocate appropriate database operation permissions according to permissions .
版权声明
本文为[Jack088]所创,转载请带上原文链接,感谢
边栏推荐
- What kind of music do you need to make for a complete game?
- Why is the LS command stuck when there are too many files?
- Metersphere developer's Manual
- What is alicloud's experience of sweeping goods for 100 yuan?
- 2020-08-15:什么情况下数据任务需要优化?
- 上海巨微专用蓝牙广播芯片
- An article takes you to understand CSS3 picture border
- 【涂鸦物联网足迹】涂鸦云平台全景介绍
- An article will introduce you to HTML tables and their main attributes
- 迅为-iMX6ULL开发板上配置AP热点
猜你喜欢
检测证书过期脚本
美团内部讲座|周烜:华东师范大学的数据库系统研究
PHP application docking justswap special development kit【 JustSwap.PHP ]
Use modelarts quickly, zero base white can also play AI!
Vue communication and cross component listening state Vue communication
JVM memory allocation - xms128m - xmx512m - XX: permsize = 128M - XX: maxpermsize = 512M
面试官: ShardingSphere 学一下吧
The role of theme music in games
What is the meaning of sector sealing of filecoin mining machine since the main network of filecoin was put online
Summary of front-end interview questions (C, s, s) that front-end engineers need to understand (2)
随机推荐
Use modelarts quickly, zero base white can also play AI!
统计项目代码行数
Basic usage of Vue codemirror: search function, code folding function, get editor value and verify in time
Road to simple HTML + JS to achieve the most simple game Tetris
Why is the LS command stuck when there are too many files?
All the way, I was forced to talk about C code debugging skills and remote debugging
Python 100 cases
Python basic variable type -- list analysis
Why is quicksort so fast?
2020-08-15:什么情况下数据任务需要优化?
list转换map(根据key来拆分list,相同key的value为一个list)
如何对数据库账号权限进行精细化管理?
git远程库回退指定版本
How much disk space does a file of 1 byte actually occupy
Flink's datasource Trilogy: direct API
How does cglib implement multiple agents?
Application insights application insights use application maps to build request link views
Summary of front-end interview questions (C, s, s) that front-end engineers need to understand (2)
ES6 learning notes (5): easy to understand ES6's built-in extension objects
谷歌浏览器实现视频播放加速功能