Alibabacloud.com offers a wide variety of articles about information rights management irm, easily find your information rights management irm information here online.
Execute permissions.Create directory: 777 minus the umask value for the created file permissions #umask: View the value of Umask #umaskNumber: Change the value of UmaskExit the current user, then login, the value of Umask will be updated to the original value, if you want to permanently exist, change the configuration fileIf the user name is the same as the basic group name:umask = 002If the user name is not the same as the base group name:umask = 022Administrator:umask = 022
Rights Management
Read,write,executeR,w,x Read and write executionFileR: For files, you can display their content by using the commands for the content view classW: You can use the editor to modify its contentsX: You can initiate a process
DirectoryR for directory reading you can use LS to view file information inside a directory, including subdirectoriesW can
Linux File Protection mechanisms (Rights Management)
The Linux file system adopts an improved access control table to realize the protection control of the file system.
First, the potential users of the file are grouped into 3 categories:
A, a user who is the owner of the file
b, the same group of users, excluding the owner.
C, all remaining users (others)
Each file holds
User is an important part of unix/linux system, user management includes user and group account management.In the Unix/linux system, either by the local or remote login system, each system must have an account, and for different system resources have different use rights.The root account in the Unix/linux system is typically used for system maintenance and management, and it has unrestricted access to all p
five sheets of ASP. NET Rights ManagementRights-Managed tables (5 tables)
some information that must be in each table
Serial number
Name
Field
Type
Primary key
Default value
is empty
Note
1
User ID
Id
Int
Is
Null
Whether
User ID
2
User name
UserName
varchar (100)
Whether
Unix/linux the representation and view of file permissions is probably the most familiar, but do you really understand the user's file permissions and permissions of the user?In fact, the file permission identifier is not just u, G, O
11
10
9
8
7
6
5
4
3
2
1
0
SUID
Guid
Sbit
R
W
X (S/S)
R
W
X (S/S)
R
W
X (S/S)
As shown above, Linux has 3 special
User Rights Management mainly has the following functions:1. Can restrict user access to which libraries, which tables2. You can restrict which tables the user performs select, CREATE, delete, delete, alter, etc.3. The IP or domain name that can restrict user login4. You can restrict whether the user's own permissions can be authorized to other users
First, user authorization
Copy Code code as foll
Catexp. Sql
Export permissions:Select any tableBackup any tableExecute any producedureExecute any type.......
Imp_full_database
Catexp. Sql
All Import Permissions
......
The tables related to the role are as follows:Dba_col_privs all permissions on a database columnDba_role_privs show roles that have been granted to users or other rolesDba_tab_privs all permissions on a database objectDba_sys_privs a user or role has been granted system p
= ' local or remote identifier ';For example, clear the record of the remote Mysql.user user root in the tableDelete from Mysql.user where user= ' root ' and host= '% ';Flush privileges;
Five. Query the user's permissions, password conditions:
Select User,host,password from Mysql.user; # # password can be added as needed650) this.width=650; "src=" Http://s5.51cto.com/wyfs02/M01/85/72/wKiom1ejcvKjx5qcAAAYGj9ISx0588.png "title=" Image.png "alt=" Wkiom1ejcvkjx5qcaaaygj9isx0588.png "/>
= ' local or remote identifier ';For example, clear the record of the remote Mysql.user user root in the tableDelete from Mysql.user where user= ' root ' and host= '% ';Flush privileges;
Five. Query the user's permissions, password conditions:
Select User,host,password from Mysql.user; # # password can be added as needed650) this.width=650; "src=" Http://s5.51cto.com/wyfs02/M01/85/72/wKiom1ejcvKjx5qcAAAYGj9ISx0588.png "title=" Image.png "alt=" Wkiom1ejcvkjx5qcaaaygj9isx0588.png "/>
levels and stored in the Mysql.procs_priv table. When a subsequent target is a table, a stored function, or a stored procedure, the OBJECT_TYPE clause should be specified as table, function, or procedure. When upgrading from an older version of MySQL, to use the phrase, you must upgrade your authorization form Revoke PermissionsTo revoke a permission is to revoke certain permissions that have been given to the user. Recovering the user's unnecessary permissions can guarantee the security of the
Tags: mysqlMySQL user consists of user and host name, using ' user ' @ ' hosst ' to indicate that MySQL user and permission information is stored in MySQL libraryMySQL database table: user #用户账号, global permissions db #库级别权限 host #主机 tables_priv #表级别权限 colums_priv #字段级别权限 procs_priv #存储过程和存储函数相关的权限 proxies_priv #代理用户权限Permission level: Library level Table level Field LevelMySQL User rights
GRANT permission
/3306/mysql.sock-penter Password: Welcome to the MySQL Monitor. Commands End With; or \g.your MySQL connection ID is 25Server version:5.6.31-log Source distributioncopyright (c), Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names trademarks of their respectiveowners. Type ' help ', ' or ' \h ' for help. Type ' \c ' to clear the current input statement. ([emailpro
: Unlock
ID: View user's account attribute information-u:uid-g:gid-g: ID of all groups
Finger: View user's account information
CHSH: Modifying the shell
CHFN: Modifying annotation information
Passwd:-l: Lock User-U: Unlock-d: Delete user password--stdin= for script creation account and specify password simultaneously (echo ' 123456 ' | passwd--stdin pas
(1) Linux login password forgot, how to do?Restart the system, before entering the system constantly press the "ESC" key in the upper left corner of the keyboard will enter such a screen, press E on the keyboard to enter the editor.After entering this screen, through the keyboard's upper and lower arrow keys to select kernel that line, and then press E to enter the editor.Add the parameter at the very end of the single, so that the system boot directly into one-user mode, and then enter the save
thinkphp Study Notes (19) How to implement Rights management RBAC
Method of Action
Let's take a look at the five-sheet data.
Tb_user: User table
Role Permission Group table
Role_user: The corresponding relationship table of the permission group and the user
Node table: Represents the URL classification in the current project, accurate to the control of each method
Access table: Represents differe
): menu_gp_id = item[' menu_id '] if menu_gp_id: # menu Group Add active menu_dict[menu_gp_id][' active '] = True else: # In-group menu list add menu_dict[item[' id ']][' Active '] = True result = {} for item in Menu_dict.values (): active = item.get (' active ') menu_id = Item [' menu_id '] If menu_id in result:result[menu_id][' Children '].append ({' title ': item[' title '], ' url ': item[' url '), ' active ': active}) if active:result[menu_id][' active '] = True else:result[menu_id] =
ChownChown-r MySQL. /usr/localChange the/usr/local/and all of its files and subdirectories to MySQLLs-al * ChgrpChgrp-r mysql/usr/localChange the/usr/local and all files and subdirectories under it to MySQLWays to delete users and groupsAct 1 > Delete User/etc/passwdDelete Group/etc/groupOther related information/etc/passwdMethod 2 > #userdel-r mysql to delete the user's home directory together#groupdel MySQLNote: Delete the group before deleting the
= WritePassword-db =/var/svn/svndata/obj/conf/passwdAuthz-db =/var/svn/svndata/obj/conf/authz=================================================Note: Each parameter in the svnserve.conf must be written shelf, with no spaces at the beginning.9, back up the original Authz and passwd files: Store SVN server user's account number, passwordCP Authz passwd/var/svn/10. Configuring the passwd fileAnquan1 = 11Anquan2 = 22ANQUAN3 = 33Anquan4 = 44#################################Tips:1. The SVN account befo
= WritePassword-db =/var/svn/svndata/obj/conf/passwdAuthz-db =/var/svn/svndata/obj/conf/authz=================================================Note: svnserve.conf each of the parameters must be shelf write, the beginning can not have spaces.9, back up the original Authz and passwd files: Store Svnserver user's account number, passwordCP Authz passwd/var/svn/10. Configuring the passwd fileAnquan1 = 11Anquan2 = 22ANQUAN3 = 33Anquan4 = 44#################################Tips:1. The SVN account befo
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.