To view MySQL user permissions, use the SHOW GRANTS command, with the syntax SHOW GRANTS FOR 'username'@'hostname'; For example, SHOW GRANTS FOR 'test_user'@'localhost'; You can view the local connection user permissions; if you are not sure of the host name, you can use the % wildcard instead. In the execution results, USAGE means there is no actual permissions, SELECT, INSERT, etc. are common operation permissions, and the content after ON indicates the scope of the permissions, such as mydb.* means all objects under the mydb database. This command is suitable for troubleshooting permission problems, permission migration and copying, and avoiding misdeletion of permissions. Notes include: It is necessary to accurately match the user name and host name. USAGE does not mean that there is no permission at all. After modifying the permission, you may need to manually refresh the permission table. Mastering this command can effectively manage MySQL user permissions.
The SHOW GRANTS
command in MySQL is an important tool for viewing user permissions, especially when debugging permission issues or doing security audits. If you want to know what permissions a user has, you can see it at a glance by using this command directly.

How to view user permissions
To view the permissions of a user, the basic syntax is:
SHOW GRANTS FOR 'Username'@'Hostname';
For example, if you want to see the permissions of user test_user
to connect locally, you can execute:

SHOW GRANTS FOR 'test_user'@'localhost';
Note that the username and hostname here must exactly match the records in the MySQL permissions system. If you are not sure about the hostname part, you can use %
wildcard instead, such as 'test_user'@'%'
to indicate a connection on any host.
How to read permission information
After executing the command, you will see results similar to the following:

GRANT USAGE ON *.* TO 'test_user'@'localhost' GRANT SELECT, INSERT ON `mydb`.* TO 'test_user'@'localhost' GRANT EXECUTE ON PROCEDURE `mydb`.`myproc` TO 'test_user'@'localhost'
Each line represents a class of permissions:
- USAGE says that it does not have any actual permissions, but the account exists.
- SELECT, INSERT are common database operation permissions.
- The content after ON represents the scope of permissions, such as
mydb.*
represents all tables under the mydb database. - If you have permissions to stored procedures, functions, or events, it will also be listed.
Some permissions may only be targeted at a specific table or column, and the content needs to be carefully checked.
Use scenarios and precautions
- Troubleshooting permission issues : When the application error "No permission to access a table", use this command to quickly confirm whether the corresponding permissions are really granted.
- Permission migration/copy : You can copy
GRANT
statements from one user's authorization statement and execute them in another environment to achieve the purpose of permission synchronization. - Avoid mistaken deletion permissions : Sometimes we may use
REVOKE
to revoke permissions, but it is best to see what permissions are currently available to avoid revoking them.
Common misunderstandings:
- I only remember the user name and forgot the host name, resulting in the lack of permissions being found.
- When I see
USAGE
, I think there is no permission. In fact, it may be that the permission at a certain database level has been missed. - Forgot to refresh the permissions. If
FLUSH PRIVILEGES
is not executed after modifying the permissions, you may see old data (although it will be automatically refreshed most of the time).
Basically that's it. Master the SHOW GRANTS
command and cooperate with a little permission knowledge, you can easily manage MySQL user permissions.
The above is the detailed content of mysql show grants for user. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

The default user name of MySQL is usually 'root', but the password varies according to the installation environment; in some Linux distributions, the root account may be authenticated by auth_socket plug-in and cannot log in with the password; when installing tools such as XAMPP or WAMP under Windows, root users usually have no password or use common passwords such as root, mysql, etc.; if you forget the password, you can reset it by stopping the MySQL service, starting in --skip-grant-tables mode, updating the mysql.user table to set a new password and restarting the service; note that the MySQL8.0 version requires additional authentication plug-ins.

GTID (Global Transaction Identifier) ??solves the complexity of replication and failover in MySQL databases by assigning a unique identity to each transaction. 1. It simplifies replication management, automatically handles log files and locations, allowing slave servers to request transactions based on the last executed GTID. 2. Ensure consistency across servers, ensure that each transaction is applied only once on each server, and avoid data inconsistency. 3. Improve troubleshooting efficiency. GTID includes server UUID and serial number, which is convenient for tracking transaction flow and accurately locate problems. These three core advantages make MySQL replication more robust and easy to manage, significantly improving system reliability and data integrity.

There are three ways to modify or reset MySQLroot user password: 1. Use the ALTERUSER command to modify existing passwords, and execute the corresponding statement after logging in; 2. If you forget your password, you need to stop the service and start it in --skip-grant-tables mode before modifying; 3. The mysqladmin command can be used to modify it directly by modifying it. Each method is suitable for different scenarios and the operation sequence must not be messed up. After the modification is completed, verification must be made and permission protection must be paid attention to.

MySQL main library failover mainly includes four steps. 1. Fault detection: Regularly check the main library process, connection status and simple query to determine whether it is downtime, set up a retry mechanism to avoid misjudgment, and can use tools such as MHA, Orchestrator or Keepalived to assist in detection; 2. Select the new main library: select the most suitable slave library to replace it according to the data synchronization progress (Seconds_Behind_Master), binlog data integrity, network delay and load conditions, and perform data compensation or manual intervention if necessary; 3. Switch topology: Point other slave libraries to the new master library, execute RESETMASTER or enable GTID, update the VIP, DNS or proxy configuration to

The steps to connect to the MySQL database are as follows: 1. Use the basic command format mysql-u username-p-h host address to connect, enter the username and password to log in; 2. If you need to directly enter the specified database, you can add the database name after the command, such as mysql-uroot-pmyproject; 3. If the port is not the default 3306, you need to add the -P parameter to specify the port number, such as mysql-uroot-p-h192.168.1.100-P3307; In addition, if you encounter a password error, you can re-enter it. If the connection fails, check the network, firewall or permission settings. If the client is missing, you can install mysql-client on Linux through the package manager. Master these commands

InnoDB implements repeatable reads through MVCC and gap lock. MVCC realizes consistent reading through snapshots, and the transaction query results remain unchanged after multiple transactions; gap lock prevents other transactions from inserting data and avoids phantom reading. For example, transaction A first query gets a value of 100, transaction B is modified to 200 and submitted, A is still 100 in query again; and when performing scope query, gap lock prevents other transactions from inserting records. In addition, non-unique index scans may add gap locks by default, and primary key or unique index equivalent queries may not be added, and gap locks can be cancelled by reducing isolation levels or explicit lock control.

Toalteralargeproductiontablewithoutlonglocks,useonlineDDLtechniques.1)IdentifyifyourALTERoperationisfast(e.g.,adding/droppingcolumns,modifyingNULL/NOTNULL)orslow(e.g.,changingdatatypes,reorderingcolumns,addingindexesonlargedata).2)Usedatabase-specifi

The function of InnoDBBufferPool is to improve MySQL read and write performance. It reduces disk I/O operations by cacheing frequently accessed data and indexes into memory, thereby speeding up query speed and optimizing write operations; 1. The larger the BufferPool, the more data is cached, and the higher the hit rate, which directly affects database performance; 2. It not only caches data pages, but also caches index structures such as B-tree nodes to speed up searches; 3. Supports cache "dirty pages", delays writing to disk, reduces I/O and improves write performance; 4. It is recommended to set it to 50%~80% of physical memory during configuration to avoid triggering swap; 5. It can be dynamically resized through innodb_buffer_pool_size, without restarting the instance.
