mysql revoke privileges from user
Jul 16, 2025 am 03:56 AMTo use REVOKE to recycle MySQL user permissions, you need to specify the permission type, database and user in the format. 1. Use REVOKE ALL PRIVILEGES, GRANT OPTION FROM 'Username'@'hostname'; 2. Use REVOKE ALL PRIVILEGES ON mydb. FROM 'Username'@'hostname'; 3. Use REVOKE ALL PRIVILEGES ON for global permissions. The permission type is ON .* FROM 'Username'@'hostname'; Note that it is recommended to refresh the permissions after execution. The permission scope must be consistent with the authorization time, and non-existent permissions cannot be recycled.
In MySQL, if you need to reclaim the permissions of a certain user, the REVOKE
statement is the command you want to use. It gives you the flexibility to remove one or more permissions without having to delete the entire user. Let me explain in detail how to operate it.

How to use REVOKE to recycle permissions
MySQL's REVOKE
command syntax structure is relatively fixed, and the basic format is as follows:
REVOKE Permission Type ON Database name. Table name FROM 'Username'@'Hostname';
For example, if you want to revoke the SELECT
permissions of the user 'testuser'@'localhost'
in the mydb
database to all tables, you can write it like this:

REVOKE SELECT ON mydb.* FROM 'testuser'@'localhost';
A few points to note:
- The permission types can be
SELECT
,INSERT
,UPDATE
, etc.; - Databases and tables can be represented by
*.*
for all tables in all databases; - The user must already exist, otherwise an error will be reported.
Common permission recovery scenarios
Recycle all permissions
If you want to reclaim all permissions of a user at one time, you can use:

REVOKE ALL PRIVILEGES, GRANT OPTION FROM 'Username'@'Hostname';
This command not only clears normal permissions, but also removes the user's ability to grant permissions to others (GRANT OPTION).
Recycle specific database permissions
For example, only reclaim all permissions of a user in the mydb
database:
REVOKE ALL PRIVILEGES ON mydb.* FROM 'testuser'@'localhost';
Recycle global permissions
If you gave the user global permissions (such as GRANT SELECT ON *.*
), and now you want to cancel, use:
REVOKE SELECT ON *.* FROM 'Username'@'Hostname';
Notes and FAQs
Remember to refresh permissions after executing REVOKE : Although manual refresh is not required in most cases, it is recommended to run it for the sake of safety:
FLUSH PRIVILEGES;
Non-existent permissions cannot be recycled : If you try to reclaim permissions that a user does not already have, MySQL will not report an error, but there will be no changes.
Root users should also be careful when operating : even for administrator accounts, don’t easily revoke their permissions, otherwise they may “l(fā)ock out” themselves.
The permission range must match the settings during authorization : for example, when you authorized
mydb.mytable
, you must specify the same range when recycling, otherwise it may not work.
Basically that's it. Master the usage of REVOKE
and manage user permissions more refined and securely. It is not complicated but it is easy to ignore details, especially whether the permission objects match this. Many times the permissions are not recycled completely, because of this reason.
The above is the detailed content of mysql revoke privileges from user. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

mysqldump is a common tool for performing logical backups of MySQL databases. It generates SQL files containing CREATE and INSERT statements to rebuild the database. 1. It does not back up the original file, but converts the database structure and content into portable SQL commands; 2. It is suitable for small databases or selective recovery, and is not suitable for fast recovery of TB-level data; 3. Common options include --single-transaction, --databases, --all-databases, --routines, etc.; 4. Use mysql command to import during recovery, and can turn off foreign key checks to improve speed; 5. It is recommended to test backup regularly, use compression, and automatic adjustment.

When handling NULL values ??in MySQL, please note: 1. When designing the table, the key fields are set to NOTNULL, and optional fields are allowed NULL; 2. ISNULL or ISNOTNULL must be used with = or !=; 3. IFNULL or COALESCE functions can be used to replace the display default values; 4. Be cautious when using NULL values ??directly when inserting or updating, and pay attention to the data source and ORM framework processing methods. NULL represents an unknown value and does not equal any value, including itself. Therefore, be careful when querying, counting, and connecting tables to avoid missing data or logical errors. Rational use of functions and constraints can effectively reduce interference caused by NULL.

GROUPBY is used to group data by field and perform aggregation operations, and HAVING is used to filter the results after grouping. For example, using GROUPBYcustomer_id can calculate the total consumption amount of each customer; using HAVING can filter out customers with a total consumption of more than 1,000. The non-aggregated fields after SELECT must appear in GROUPBY, and HAVING can be conditionally filtered using an alias or original expressions. Common techniques include counting the number of each group, grouping multiple fields, and filtering with multiple conditions.

MySQL paging is commonly implemented using LIMIT and OFFSET, but its performance is poor under large data volume. 1. LIMIT controls the number of each page, OFFSET controls the starting position, and the syntax is LIMITNOFFSETM; 2. Performance problems are caused by excessive records and discarding OFFSET scans, resulting in low efficiency; 3. Optimization suggestions include using cursor paging, index acceleration, and lazy loading; 4. Cursor paging locates the starting point of the next page through the unique value of the last record of the previous page, avoiding OFFSET, which is suitable for "next page" operation, and is not suitable for random jumps.

MySQL supports transaction processing, and uses the InnoDB storage engine to ensure data consistency and integrity. 1. Transactions are a set of SQL operations, either all succeed or all fail to roll back; 2. ACID attributes include atomicity, consistency, isolation and persistence; 3. The statements that manually control transactions are STARTTRANSACTION, COMMIT and ROLLBACK; 4. The four isolation levels include read not committed, read submitted, repeatable read and serialization; 5. Use transactions correctly to avoid long-term operation, turn off automatic commits, and reasonably handle locks and exceptions. Through these mechanisms, MySQL can achieve high reliability and concurrent control.

Character set and sorting rules issues are common when cross-platform migration or multi-person development, resulting in garbled code or inconsistent query. There are three core solutions: First, check and unify the character set of database, table, and fields to utf8mb4, view through SHOWCREATEDATABASE/TABLE, and modify it with ALTER statement; second, specify the utf8mb4 character set when the client connects, and set it in connection parameters or execute SETNAMES; third, select the sorting rules reasonably, and recommend using utf8mb4_unicode_ci to ensure the accuracy of comparison and sorting, and specify or modify it through ALTER when building the library and table.

To view the size of the MySQL database and table, you can query the information_schema directly or use the command line tool. 1. Check the entire database size: Execute the SQL statement SELECTtable_schemaAS'Database',SUM(data_length index_length)/1024/1024AS'Size(MB)'FROMinformation_schema.tablesGROUPBYtable_schema; you can get the total size of all databases, or add WHERE conditions to limit the specific database; 2. Check the single table size: use SELECTta

To set up asynchronous master-slave replication for MySQL, follow these steps: 1. Prepare the master server, enable binary logs and set a unique server-id, create a replication user and record the current log location; 2. Use mysqldump to back up the master library data and import it to the slave server; 3. Configure the server-id and relay-log of the slave server, use the CHANGEMASTER command to connect to the master library and start the replication thread; 4. Check for common problems, such as network, permissions, data consistency and self-increase conflicts, and monitor replication delays. Follow the steps above to ensure that the configuration is completed correctly.
