# 测试SSL连接
mysql -u admin -p -h 192.168.1.13 -P 4000 --ssl-mode=REQUIRED

# 测试权限
mysql -u app -p -h 192.168.1.13 -P 4000
USE fgedudb;
SELECT * FROM fgedu_users;
INSERT INTO fgedu_users (id, username, email, age, created_at) VALUES (14, 'user14', 'user14@example.com', 36, NOW());
DELETE FROM fgedu_users WHERE id = 14;

# 测试只读用户
mysql -u readonly -p -h 192.168.1.13 -P 4000
USE fgedudb;
SELECT * FROM fgedu_users;
INSERT INTO fgedu_users (id, username, email, age, created_at) VALUES (15, 'user15', 'user15@example.com', 37, NOW());

# 查看审计日志
cat /tidb/log/tidb-audit.log

# 测试SSL连接
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.7.25-TiDB-v7.5.0 TiDB Server (Apache License 2.0) Community Edition, MySQL 5.7 compatible

# 测试app用户权限
mysql> SELECT * FROM fgedu_users;
+----+----------+---------------------+-----+---------------------+
| id | username | email               | age | created_at          |
+----+----------+---------------------+-----+---------------------+
|  1 | admin    | admin@example.com   |  34 | 2024-04-09 10:00:00 |
|  2 | user1    | user1@example.com   |  25 | 2024-04-09 10:00:00 |
|  3 | user2    | user2@example.com   |  26 | 2024-04-09 10:00:00 |
+----+----------+---------------------+-----+---------------------+
3 rows in set (0.01 sec)

mysql> INSERT INTO fgedu_users (id, username, email, age, created_at) VALUES (14, 'user14', 'user14@example.com', 36, NOW());
Query OK, 1 row affected (0.01 sec)

mysql> DELETE FROM fgedu_users WHERE id = 14;
Query OK, 1 row affected (0.01 sec)

# 测试readonly用户权限
mysql> SELECT * FROM fgedu_users;
+----+----------+---------------------+-----+---------------------+
| id | username | email               | age | created_at          |
+----+----------+---------------------+-----+---------------------+
|  1 | admin    | admin@example.com   |  34 | 2024-04-09 10:00:00 |
|  2 | user1    | user1@example.com   |  25 | 2024-04-09 10:00:00 |
|  3 | user2    | user2@example.com   |  26 | 2024-04-09 10:00:00 |
+----+----------+---------------------+-----+---------------------+
3 rows in set (0.01 sec)

mysql> INSERT INTO fgedu_users (id, username, email, age, created_at) VALUES (15, 'user15', 'user15@example.com', 37, NOW());
ERROR 1142 (42000): INSERT command denied to user 'readonly'@'192.168.1.1' for table 'fgedu_users'

# 查看审计日志
{"time":"2024-04-09T10:00:00+08:00","type":"general","event":"query","sql":"SELECT * FROM fgedu_users","user":"app","host":"192.168.1.1","ip":"192.168.1.1","port":54321,"status":0,"duration":10,"session_id":"1234567890"}
{"time":"2024-04-09T10:00:01+08:00","type":"general","event":"query","sql":"INSERT INTO fgedu_users (id, username, email, age, created_at) VALUES (14, 'user14', 'user14@example.com', 36, NOW())","user":"app","host":"192.168.1.1","ip":"192.168.1.1","port":54321,"status":0,"duration":15,"session_id":"1234567890"}
{"time":"2024-04-09T10:00:02+08:00","type":"general","event":"query","sql":"DELETE FROM fgedu_users WHERE id = 14","user":"app","host":"192.168.1.1","ip":"192.168.1.1","port":54321,"status":0,"duration":12,"session_id":"1234567890"}
{"time":"2024-04-09T10:00:03+08:00","type":"general","event":"query","sql":"SELECT * FROM fgedu_users","user":"readonly","host":"192.168.1.1","ip":"192.168.1.1","port":54322,"status":0,"duration":9,"session_id":"0987654321"}
{"time":"2024-04-09T10:00:04+08:00","type":"general","event":"query","sql":"INSERT INTO fgedu_users (id, username, email, age, created_at) VALUES (15, 'user15', 'user15@example.com', 37, NOW())","user":"readonly","host":"192.168.1.1","ip":"192.168.1.1","port":54322,"status":1142,"duration":5,"session_id":"0987654321"}