Percona-Toolkit系列(22) --- pt-secure-collect

pt-show-grants

pt-show-grants：官方地址

說明

用途：就是顯示當前數據庫中所有用戶的授權情況並以GRANT語句現實，方便複製到其他數據庫上執行。

語法：

pt-show-grants [OPTIONS] [DSN]

具體例子

• 顯示數據庫中所有用戶的授權信息

[root@BigData ~]# pt-show-grants h=127.0.0.1,p=123
-- Grants dumped by pt-show-grants
-- Dumped from server 127.0.0.1 via TCP/IP, MySQL 5.5.60-MariaDB at 2019-07-31 16:16:31
-- Grants for 'monitordba'@'%'
GRANT ALL PRIVILEGES ON *.* TO 'monitordba'@'%' IDENTIFIED BY PASSWORD '*D5D19CE627A75A5F8495EC97B8FDE641FECF4068' WITH GRANT OPTION;
-- Grants for 'root'@'%'
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY PASSWORD '*23AE809DDACAF96AF0FD78ED04B6A265E05AA257' WITH GRANT OPTION;
-- Grants for 'zxmon3'@'%'
GRANT USAGE ON *.* TO 'zxmon3'@'%';

• 顯示數據庫中所有用戶的授權信息，並給出撤銷的語句

[root@BigData ~]# pt-show-grants h=127.0.0.1,p=123 --separate --revoke
-- Grants dumped by pt-show-grants
-- Dumped from server 127.0.0.1 via TCP/IP, MySQL 5.5.60-MariaDB at 2019-07-31 16:20:07
-- Revoke statements for 'monitordba'@'%'
REVOKE ALL PRIVILEGES ON *.* FROM 'monitordba'@'%';
REVOKE GRANT OPTION ON *.* FROM 'monitordba'@'%';
-- Grants for 'monitordba'@'%'
GRANT ALL PRIVILEGES ON *.* TO 'monitordba'@'%' IDENTIFIED BY PASSWORD '*D5D19CE627A75A5F8495EC97B8FDE641FECF4068' WITH GRANT OPTION;
-- Revoke statements for 'root'@'%'
REVOKE ALL PRIVILEGES ON *.* FROM 'root'@'%';
REVOKE GRANT OPTION ON *.* FROM 'root'@'%';
-- Grants for 'root'@'%'
GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY PASSWORD '*23AE809DDACAF96AF0FD78ED04B6A265E05AA257' WITH GRANT OPTION;
-- Revoke statements for 'zxmon3'@'%'
REVOKE USAGE ON *.* FROM 'zxmon3'@'%';
-- Grants for 'zxmon3'@'%'
GRANT USAGE ON *.* TO 'zxmon3'@'%';