@@ -3,7 +3,7 @@ title: SHOW_GRANTS
33---
44import FunctionDescription from '@site/src /components/FunctionDescription';
55
6- <FunctionDescription description =" ๅผๅ
ฅๆๆดๆฐไบ๏ผv1.2.487 " />
6+ <FunctionDescription description =" ๅผๅ
ฅๆๆดๆฐไบ๏ผv1.2.704 " />
77
88ๅๅบๆพๅผๆไบ็จๆทใ่ง่ฒๆ็นๅฎๅฏน่ฑก็ๆ้ใ
99
@@ -20,24 +20,93 @@ SHOW_GRANTS('table', '<table_name>', '<catalog_name>', '<db_name>')
2020SHOW_GRANTS(' database' , ' <db_name>' , ' <catalog_name>' )
2121```
2222
23+ ## ้
็ฝฎ ` enable_expand_roles ` ่ฎพ็ฝฎ
24+
25+ ` enable_expand_roles ` ่ฎพ็ฝฎๆงๅถ SHOW_GRANTS ๅฝๆฐๅจๆพ็คบๆ้ๆถๆฏๅฆๅฑๅผ่ง่ฒ็ปงๆฟใ
26+
27+ - ` enable_expand_roles=1 ` ๏ผ้ป่ฎค๏ผ๏ผ
28+
29+ - SHOW_GRANTS ้ๅฝๅฑๅผ็ปงๆฟ็ๆ้๏ผ่ฟๆๅณ็ๅฆๆไธไธช่ง่ฒ่ขซๆไบไบๅฆไธไธช่ง่ฒ๏ผๅฎๅฐๆพ็คบๆๆ็ปงๆฟ็ๆ้ใ
30+ - ็จๆท่ฟๅฐ็ๅฐ้่ฟๅ
ถๅ้
็่ง่ฒๆไบ็ๆๆๆ้ใ
31+
32+ - ` enable_expand_roles=0 ` ๏ผ
33+
34+ - SHOW_GRANTS ไป
ๆพ็คบ็ดๆฅๅ้
็ปๆๅฎ่ง่ฒๆ็จๆท็ๆ้ใ
35+ - ไฝๆฏ๏ผ็ปๆไปๅฐๅ
ๆฌ GRANT ROLE ่ฏญๅฅไปฅๆ็คบ่ง่ฒ็ปงๆฟใ
36+
37+ ไพๅฆ๏ผ่ง่ฒ ` a ` ๅจ ` t1 ` ไธๅ
ทๆ ` SELECT ` ๆ้๏ผ่ง่ฒ ` b ` ๅจ ` t2 ` ไธๅ
ทๆ ` SELECT ` ๆ้๏ผ
38+
39+ ``` sql
40+ SELECT grants FROM show_grants(' role' , ' a' ) ORDER BY object_id;
41+
42+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
43+ โ grants โ
44+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
45+ โ GRANT SELECT ON ' default' .' default' .' t1' TO ROLE ` a` โ
46+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
47+
48+ SELECT grants FROM show_grants(' role' , ' b' ) ORDER BY object_id;
49+
50+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
51+ โ grants โ
52+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
53+ โ GRANT SELECT ON ' default' .' default' .' t2' TO ROLE ` b` โ
54+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
55+ ```
56+
57+ ๅฆๆๅฐ่ง่ฒ ` b ` ๆไบ่ง่ฒ ` a ` ๅนถๅๆฌกๆฃๆฅ่ง่ฒ ` a ` ็ๆ้๏ผๅฏไปฅ็ๅฐ่ง่ฒ ` a ` ็ฐๅจๅ
ๅซไบๅจ ` t2 ` ไธ็ ` SELECT ` ๆ้๏ผ
58+
59+ ``` sql
60+ GRANT ROLE b TO ROLE a;
61+ ```
62+
63+ ``` sql
64+ SELECT grants FROM show_grants(' role' , ' a' ) ORDER BY object_id;
65+
66+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
67+ โ grants โ
68+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
69+ โ GRANT SELECT ON ' default' .' default' .' t1' TO ROLE ` a` โ
70+ โ GRANT SELECT ON ' default' .' default' .' t2' TO ROLE ` a` โ
71+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
72+ ```
73+
74+ ๅฆๆๅฐ ` enable_expand_roles ` ่ฎพ็ฝฎไธบ ` 0 ` ๅนถๅๆฌกๆฃๆฅ่ง่ฒ ` a ` ็ๆ้๏ผ็ปๆๅฐๆพ็คบ ` GRANT ROLE ` ่ฏญๅฅ๏ผ่ไธๆฏๅๅบไป่ง่ฒ ` b ` ็ปงๆฟ็ๅ
ทไฝๆ้๏ผ
75+
76+ ``` sql
77+ SET enable_expand_roles= 0 ;
78+ ```
79+
80+ ``` sql
81+ SELECT grants FROM show_grants(' role' , ' a' ) ORDER BY object_id;
82+
83+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
84+ โ grants โ
85+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโค
86+ โ GRANT SELECT ON ' default' .' default' .' t1' TO ROLE ` a` โ
87+ โ GRANT ROLE b to ROLE ` a` โ
88+ โ GRANT ROLE public to ROLE ` a` โ
89+ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
90+ ```
91+
2392## ็คบไพ
2493
2594ๆญค็คบไพๅฑ็คบไบๅฆไฝๅๅบๆไบ็จๆทใ่ง่ฒๅ็นๅฎๅฏน่ฑก็ๆ้ใ
2695
2796``` sql
28- -- ๅๅปบไธไธชๆฐ็จๆท
97+ -- ๅๅปบๆฐ็จๆท
2998CREATE USER 'user1 ' IDENTIFIED BY ' password' ;
3099
31- -- ๅๅปบไธไธชๆฐ่ง่ฒ
100+ -- ๅๅปบๆฐ่ง่ฒ
32101CREATE ROLE analyst;
33102
34103-- ๅฐ analyst ่ง่ฒๆไบ็จๆท
35104GRANT ROLE analyst TO ' user1' ;
36105
37- -- ๅๅปบไธไธช stage
106+ -- ๅๅปบ stage
38107CREATE STAGE my_stage;
39108
40- -- ๅฐ stage ็ๆ้ๆไบ่ง่ฒ
109+ -- ๅฐ stage ไธ็ๆ้ๆไบ่ง่ฒ
41110GRANT READ ON STAGE my_stage TO ROLE analyst;
42111
43112-- ๅๅบๆไบ็จๆท็ๆ้
0 commit comments