The mysql_grants module is used to grant and revoke MySQL permissions.
name you pass in purely symbolic and does not have anything to do
with the grant itself.
database parameter needs to specify a 'priv_level' in the same
specification as defined in the MySQL documentation:
This state is not able to set password for the permission from the
specified host. See
salt.states.mysql_user for further
frank_exampledb: mysql_grants.present: - grant: select,insert,update - database: exampledb.* - user: frank - host: localhost frank_otherdb: mysql_grants.present: - grant: all privileges - database: otherdb.* - user: frank restricted_singletable: mysql_grants.present: - grant: select - database: somedb.sometable - user: joe
absent(name, grant=None, database=None, user=None, host=u'localhost', grant_option=False, escape=True, **connection_args)¶
Ensure that the grant is absent
present(name, grant=None, database=None, user=None, host=u'localhost', grant_option=False, escape=True, revoke_first=False, ssl_option=False, **connection_args)¶
Ensure that the grant is present with the specified properties
By default, MySQL will not do anything if you issue a command to grant privileges that are more restrictive than what's already in place. This effectively means that you cannot downgrade permissions without first revoking permissions applied to a db.table/user pair first.
To have Salt forcibly revoke perms before applying a new grant, enable the 'revoke_first options.
WARNING: This will remove permissions for a database before attempting to apply new permissions. There is no guarantee that new permissions will be applied correctly which can leave your database security in an unknown and potentially dangerous state. Use with caution!
Adds the specified ssl options for the connecting user as requirements for this grant. Value is a list of single-element dicts corresponding to the list of ssl options to use.
Possible key/value pairings for the dicts in the value:
- SSL: True - X509: True - SUBJECT: <subject> - ISSUER: <issuer> - CIPHER: <cipher>
The non-boolean ssl options take a string as their values, which should be an appropriate value as specified by the MySQL documentation for these options.
False (no ssl options will be used)