Is that cost money?

If you appreciate this education, please think about going to Eli the computer guy dot com and offering a one time or monthly recurring donation.

Welcome back.

As you know, I have Eli, the computer guy, and in today's video, I'm going to be showing you how to create users and my sequel and be able to assign them privileges.

So essentially, privileges and the mice equal world are permissions, So you're going to be allowing your users to be able to do whatever it is that you want them to.

D'oh!

You can assign them all privileges so that they have the ability to in search drop update within your database server, you're gonna sign specific privileges, so you can simply say I only want this user account to be able to select.

So imagine if you're creating a script, or imagine if you're giving user access to your database and you're saying, Hey, I want you to be able to run reports, but I don't want you to be able to add anything.

And I don't want you Mabel update anything.

All I want you to do is be able to be able to just run the reports, then that's how you can assign privileges to allow people to only do the exact things that you want to dio One of cool things in the mice Equal world is you can really get relatively granular and the permissions that you are able to assign different users.

So basically you can give access to everything all tables on all databases and assign that to somebody.

Or you can say all tables in a particular database.

So we have in the lab that we've been doing with a Class D B database and then within that Class D B database, we have a user's table so we could say that this user has the ability to do whatever they want within any tables within the Class D V database.

That's one thing that you could d'oh!

You can assign just a table so they only have access to one particular table.

And one of the cool things is what you can actually also d'oh!

Where they can only have access to one column in one table S O.

This is one of those important things to be thinking about in the world of security.

One of the reasons we have so many issues with hackers in the cybersecurity world is frankly, a lot of our infrastructure is not built with the security that is already built into the system.

Again, if you're thinking about doing something like a sequel injection attack on and you're using some type of Web page in order to try to hack into a database server, well, the fact of the matter is, is this is if you restrict the permissions so that the user account that that script is attacked two can only do select or can even on Lee do select on a one particular column on one table?

The fact of the matter is, the attack surface that is that a hacker may go after just simply becomes a lot smaller.

And so what?

I'm gonna be showing you today's again how to create these user accounts, how to assign the privileges and get a little bit into things like revoking privileges and that type of thing.

So, as I said many times before warning order, will Robinson or need warning s o the things that I'm going to be TIF you do today are a very small subset of the security that you're able to do in a my sequel database server.

It is amazing literally how much security is actually built into my sequel database server, and you could probably do a whole 10 hour class just going over all the different security features that are available.

So what I'm going to be doing is I'm going to be showing you a small subset of what you are able to dio.

This will allow you to be him to create user accounts, to be able to sign those user accounts permissions be able to do all of these basic tasks.

If you're interested in learning more about database security, Obviously there is a lot more out on the Web and almost likely be doing another video in the future.

So again, if you're an old timer and you come in here like aah, you lie allies, barely barely scraping the surface of all the security that that's possible of my sequel.

You would be correct, because if I scream for more than the surface, a lot of people are gonna get frustrated.

Their heads are gonna explode and then they're going to go home, and I don't want people to give up on my watch.

If you're gonna give up, give up later, look later.

What time did Ugo I'm trying to keep you in the loop of trying Thio keep you feeling confident, but it is important.

Understand?

Again if you think about putting on my sequel database server into what is called a production environment.

So he's talking about production environment that's actually putting into a server room that's actually having your users be able to access it.

And again, if your users are actually being able to access it, that means the Internet.

Basically, the network is able to access it.

If you're going to be creating a production server, do look Maura into security again.

What I'm talking about today is very, very, very, very simplistic on.

It might leave you open to possible hacking, hacking attacks if you don't walk down your server more.

What I'm teaching you is great for the lab environment again.

Do some more research if you're actually gonna put this into a server room.

So now that I've given you the warnings and we've done the introduction, let's go over to the computer so I can show you how this stuff actually works.

So here we are, back at my lab system again, I'm using a Mac book pro.

I have a virtual box installed, a Mac book pro within a virtual machine on virtual box.

I have gone to desktop 18.4 because I want that graphical user environment as we do Maur Mork classes on this track that gooey will be useful to us on.

So, basically, this is the environment that we're running in.

I used a task cell to be able install the full lamp stack of passion, my sequel and PHP.

And so with that, let's go down here, show applications.

You go to the search, you type in terminal on.

Then you open up the terminal s.

So now we are in to the terminal, and at this point, we're going to log in to my sequel again.

If you are coming into this, this a Siri's brand new.

I'm longing in a little bit differently than you normally should, because we do not have user accounts created yet.

I want to show how to create a database and a table and insert records to do all that kind of stuff before I got into the user accounts before I got into the security s O.

If you're new to all this, if you have an actual user account that allows you to have all privileges within your bicycle database server, then log in the normal way.

So the normal way of logging it would be my sequel Space ifit you user name, space hyphen P.

So that's how you normally log in to my secret database server again.

We're not doing that because I have my own way of t s.

So we're going to do Sudo my sequel.

123456 Super secret password.

And we're now in my sequel.

So again, doing pseudo my sequel.

What this does is this.

Log this in as the actual route user.

So So we have full access to the database eso past this we're gonna do is going to control l clear everything out.

So the first thing that we need to do is take a look at the user's table.

So if we do select and what we're actually doing press select two columns out of users table select user comma and then host.

So these air two different columns out of the user table within the my single database.

We're gonna select the user column and the host column from, uh, my sequel dot user.

Right?

So my sequel is the database.

So my single database and went into my single database is the user table.

So this is default, right?

So every single my single database server will have this.

And so this is where the user account information is stored on.

We're going to semi Colon Godo semi colon, and then we're going to hit her.

That's basically what we see here is we see user and we see host.

We have Debbie in haIf insists my sequel, That Session I sequel, Assists and Root, and you can see over here for host.

We see local host right on DSO Host is one of those things we will get into Maurin a different class.

This is important with security for from a different from a different standpoint, but the important thing to realize with user accounts, so like when you're along in it and when you're using a user account within my sequel database server basically your user name, and the host is combined in order to create your user account.

So if you had Tim at local host, that would be a different user account than simply Tim without any host which will be a different user account than Tim at 192.168 not 1.4.

So, basically, when you're when you're identifying user account, the you have the user name and the host come together to actually create that user account.

So this is one of those things again.

It gets a little bit complicated.

We're just going to be dealing with a local host for the host today.

But it's something something to keep in mind.

It was okay, so we have We can see we have user, we have root and we have host.

So the first thing that we want to do is we actually want to create a user now.

So you're going to create a user Bob, right?

Because, hey, Bub has to be part of my sequel server.

So we're gonna just simply create a user turns to create user, and then we're going to do is we're going to a single quotation Mark Bob Close.

Single quotation mark at single quotation Mark local host.

Now, do not finger this.

Make sure all of that is right.

So we're going to create a user.

So, Bob, So that's gonna be the user name and the host is going to be a local hopes.

So, Bob at local host on, then what we're going to do is we're gonna say aye identified by.

And so what this is is we're basically saying, What?

The password for this user ISS And so we're gonna say, identified by single quotation Mark And then whatever your password is 123456 Because I'm super cool of security that way.

So create a user bob at local host identified by 1234560 remember, do all those little single quotation marks or you'll run into problems and then we're going to do is we're going to do this Semi colon on.

We're going to run, And then a query.

Okay.

Zero was affected.

Blah, blah.

So we just, uh, go up.

So select user host from my sequel, not user.

And then we hit inner.

And then now we can see so up at the top is Bob with the host of local hope.

So we now have a bob account.

Here s 01 of the things that we can do is we can look at what privileges this bob account has.

Yes, we do.

Control.

Elegant and so doing control l clears a screen.

And so now we can do is do something called show grants.

So show grants says, Show me the privileges of a particular user.

So show grants four.

Then we say Bob at local host.

Right?

So show, show the privileges for Bob at local host.

Now we do semi colon.

Then we hit Enter.

And so we say grants for Bob at local host Grant usage on star dot star.

So we're looking at this The first star here.

Basically, when we're looking at naming convention Ana my secret out of a server.

The first part is the database itself sodomized my sequel or class D d b, whatever else the database is first, then you have a dot and then after that is the tables.

So, uh, so my sequel dot user is the user table in the my sequel database.

ah, user or I'm sorry, Class D b dot user is the user table in the class database.

And so basically, what we're saying here is grant usage.

So usage basically just means you can log in on all databases and all tables to Bob at local host.

So that shows me what the privileges for this bob account are.

Now, if I'm long in with a user account and I want to know what my particular privileges are, I can do show grants and all I do is show grants.

You don't have to do the four.

Yes, you're logged.

It is you.

Then I do semicolon.

And then I hit her.

And so I didn't see.

I could see who I'm Longan is.

So Groot grants for route at local host.

And so I have grant all privileges.

So I have all privileges.

All privileges is one of the privileges on star dot star.

So all databases dot all tables to root at local host and that there's something here called with grant options.

So basically, what with grant option is is that this user account is actually able to give privileges to other user accounts, right?

So again.

So, like with Bob, were about to give privileges to Bob.

The reason I'm able to give privileges to Bob is because I have this with grant options again.

As I talk about before we start talking about permissions and all that, they're a crap ton of permissions.

If we go over to my sequel, dabbed up my sequel dot com, and we actually look at the privileges provided we can go and we can see that there are just a crap ton.

So there's all altar create, create roll, great temporary tables, drop drop roll grant option process references, reload super trigger update.

And then you come down here to these other ones.

Set user I d roll admit that kind of thing on.

So the important thing to be thinking about with the privileges that we're going to be talking about today is we're only going to giving the privileges that we have used up until this point so we can do the insert privilege.

We could do the update privilege.

You do the altar privilege, we could do the select privilege, right?

So those are the basics.

But if you want to get Maur into weeds, with it.

Just realize that there are a hell of a lot more privileges that you can actually give user accounts.

So So now Now we have a bob user.