Permission Design Specifications

Updated on 2025-02-27 GMT+08:00

View PDF

[Rule] The initial database user can only connect and access a database for DBA management. Services are not allowed to directly log in as this user to connect to and access the database.
NOTE:

Initial database user, that is, the database installation user, which has the same name as the OS user to which the cluster belongs.
[Rule] The initial database user creates a database and users for services. Services use the created users to log in to and access the database.
[Rule] Assign permissions to roles and users based on the least privilege principle.
[Recommendation] Manage permissions by roles instead of users.
Use roles to manage permissions, that is, configure permissions for roles and grant the roles to users.

Roles facilitate permission management in scenarios such as multiple users and user changes. Example:
- Roles and users are in many-to-many relationship. A role can be granted to multiple users. If permissions of a role are modified, the permissions of the granted users can be updated at the same time.
- Deleting a user does not affect the role.
- A new user can quickly obtain required permissions by granting a role to the user.
[Recommendation] When deleting a specified database, revoke the CONNECT permission of users on the database to prevent deletion failures caused by active database connections.