SQL Server 数据库安全

134 阅读1分钟
 # 创建登陆用户
 create login login_name from windows with default_database = database | default_language = language;
 create login [localhost\hoojo-pc] from windows with default_database = testHome;
 # 创建登陆用户
 create login login_name with password = 'pwd' [hashed] [must_change] [check_expiration] [check_policy]
 create login admin with password = '123456', default_database = testHome;
 ​
 # 查看登陆用户
 select * from sys.sql_logins;
 ​
 # 修改用户
 alter login admin with name = jackson;
 alter login jackson with password = 'abcd';
 ​
 # 禁用、启用用户
 alter login jackson disable;    --禁用
 alter login jackson enable;        --启用
 ​
 # 删除用户
 drop login jackson;
 ​
 # 修改映射凭据(将登录名MacraeS 映射到凭据Custodian04)
 alter login jackson with credential = Custodian04;
 ​
 # 数据库用户
 # 创建数据库用户
 create user jack from login admin;
 create user jason for login jackson;
 ​
 create user jack from login admin with default_schema = temp_schema;
 ​
 # 启动guest用户(不推荐使用)
 # 特殊用户dbo、guest;sa对应的dbo用户,其他没有映射的用户就是guest用户
 grant connect to guest;
 ​
 # 修改用户
 alter user jack with name = jason;
 alter user jason with default_schema = jason_schema;
 ​
 # 删除用户
 drop user jason;
 ​
 # 数据库角色
 # 给jack用户授权buyers角色
 create role buyers authorIzation jack;
 ​
 # 修改角色
 alter role buyers with name = new_buyers;
 ​
 # 删除角色
 drop role new_buyers;
 ​
 # 架构管理
 # 创建
 create schema temp_schema;
 ​
 # 指定用户
 create schema jason_scheam authorization jason;
 ​
 # 授权查询
 grant select to jason;
 ​
 # 删除
 drop schema jason_scheam;
 ​
 # 权限
 # 授权创建table
 grant create table to jason;
 # 授权jason查询student表
 grant select on student to jason;
 ​
 # 收回权限
 revoke create table to jason;
 revoke select on student to jason;