数据库用户权限管理（二）

瀚高PG实验室

于 2018-01-31 17:38:51 发布

阅读量618

点赞数

CC 4.0 BY-SA版权

分类专栏： HighGo DB之安全机制

本文链接：https://blog.csdn.net/pg_hgdb/article/details/79220108

HighGo DB之安全机制专栏收录该内容

26 篇文章

订阅专栏

本文通过具体实例展示了在HighGo数据库中，不同类型的用户权限之间存在明确的界限，即使将角色权限授予其他用户，也不能混用这些权限。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

作者：瀚高PG实验室（Highgo PG Lab）-海无涯

上次说到数据库用户的权限分为两大类，后来做测试的时候发现一个问题，就是这两大类权限是有很强的“界限”的。

举例如下：

highgo=# \du
                                   List of roles
 Role name |                         Attributes                         | Member of 
-----------+------------------------------------------------------------+-----------
 highgo    | Superuser, Create role, Create DB, Replication, Bypass RLS | {}
 test      |                                                            | {}
 trole     | Create role                                                | {}


highgo=# \c highgo test;

PSQL: Release 4.1.1
Connected to:
HighGo Database V4.1 Enterprise Edition Release 4.1.1 - 64-bit Production

You are now connected to database "highgo" as user "test".
highgo=> create role eee;
错误:  42501: 创建角色的权限不够
highgo=> \c highgo trole

PSQL: Release 4.1.1
Connected to:
HighGo Database V4.1 Enterprise Edition Release 4.1.1 - 64-bit Production

You are now connected to database "highgo" as user "trole".
highgo=> select user;
 current_user 
--------------
 trole
(1 row)

highgo=> create role qqq;
CREATE ROLE
连接超级用户更改权限：
highgo=# grant trole to test;
GRANT ROLE
highgo=> \du
                                   List of roles
 Role name |                         Attributes                         | Member of 
-----------+------------------------------------------------------------+-----------
 highgo    | Superuser, Create role, Create DB, Replication, Bypass RLS | {}
 test      |                                                            | {trole}
 trole     | Create role                                                | {}
highgo=# \c highgo test;

PSQL: Release 4.1.1
Connected to:
HighGo Database V4.1 Enterprise Edition Release 4.1.1 - 64-bit Production

You are now connected to database "highgo" as user "test".
highgo=> create role eee;
错误:  42501: 创建角色的权限不够

仍旧不能创建角色，说明两种权限不能混谈。