github.com/matrixorigin/matrixone@v0.7.0/test/distributed/cases/tenant/privilege/role7_special_roles_accountadmin.sql (about)

     1  -- cases for accountadmin
     2  drop account if exists accx;
     3  create account accx admin_name 'xcca' identified by '111';
     4  
     5  -- @session:id=3&user=accx:xcca&password=111
     6  drop role if exists rolex;
     7  create role rolex;
     8  drop user if exists userx,root,dump;
     9  create user userx identified by '111',root identified by '111',dump identified by '111';
    10  grant accountadmin to xcca;
    11  grant accountadmin to userx;
    12  grant accountadmin to root;
    13  grant accountadmin to dump;
    14  grant accountadmin to rolex;
    15  grant rolex to accountadmin;
    16  grant public to xcca;
    17  grant public to userx;
    18  grant public to rolex;
    19  grant rolex to public;
    20  
    21  revoke accountadmin from xcca;
    22  revoke accountadmin from userx;
    23  revoke accountadmin from root;
    24  revoke accountadmin from dump;
    25  revoke accountadmin from rolex;
    26  revoke rolex from accountadmin;
    27  revoke public from xcca;
    28  revoke public from userx;
    29  revoke public from root;
    30  revoke public from dump;
    31  revoke public from rolex;
    32  revoke rolex from public;
    33  
    34  grant show databases,create database on account * to accountadmin;
    35  revoke show databases,create database on account * from accountadmin;
    36  revoke connect on account * from public;
    37  revoke show databases on account * from public;
    38  
    39  -- create special role
    40  create role accountadmin;
    41  create role moadmin;
    42  
    43  drop role rolex;
    44  drop user userx,root,dump;
    45  -- @session
    46  drop account if exists accx;