|
REVOKE deletes user IDs and removes permissions to specific users in a secured database. You can use the REVOKE statement to revoke CREATE TABLE, CREATE VIEW, and CREATE PROCEDURE privileges.
REVOKE CREATETAB | CREATEVIEW | CREATESP FROM public-or-user- group-name [ , public-or-user-group-name ]... REVOKE LOGIN FROM user-name [ , user-name ]... REVOKE permission ON < * | [ TABLE ] table-name[ owner-name ]>| VIEW view-name | PROCEDURE stored_procedure-name > FROM user-or- group-name [ , user-or-group-name ]... * ::= all of the objects (that is, all tables, views and stored procedures) permission ::= ALLtable-name ::= user-defined table-name view-name ::= user-defined view-name stored-procedure-name ::= user-defined stored_procedure-name public-or-user-group-name ::= PUBLIC | user-group-name user-group-name ::= user-name | group-name user-name ::= user-defined user-name group-name ::= user-defined group-name| SELECT [ ( column-name [ , column-name ]... ) ] | UPDATE [ ( column-name [ , column-name ]... ) ] | INSERT [ ( column-name [ , column-name ]... ) ] | DELETE | ALTER | REFERENCES | EXECUTE
The following table shows the syntax for a given action:
|
To REVOKE Privileges For This Action
|
Use This Syntax with REVOKE
|
|---|---|
|
CREATE TABLE
|
CREATETAB
|
|
CREATE VIEW
|
CREATEVIEW
|
|
CREATE PROCEDURE
|
CREATESP
|
The following table shows which permissions are removed if you use the ALL key word.
|
Permission Removed by ALL
|
Table
|
View
|
Stored Procedure
|
|---|---|---|---|
|
ALTER
|
|
|
|
|
DELETE
|
|
|
|
|
INSERT
|
|
|
|
|
REFERENCES
|
|
||
|
SELECT
|
|
|
|
|
UPDATE
|
|
|
|
|
EXECUTE
|
|
The following statement revokes all these privileges from dannyd for table Class.
The following statement revokes all privileges from dannyd and travisk for table Class.
The following statement revokes DELETE privileges from dannyd and travisk for table Class.
The following example revokes INSERT rights from keithv and miked for table Class.
The following example revokes INSERT rights from keithv and brendanb for table Person and columns First_name and Last_name.
The following statement revokes ALTER rights from dannyd from table Class.
The following example revokes SELECT rights from dannyd and travisk on table Class.
The following statement revokes SELECT rights from dannyd and travisk in table Person for columns First_name and Last_name.
The following example revokes UPDATE rights from dannyd and travisk for table Person.
The following example revokes CREATE VIEW privileges from user1.
The following example revokes EXECUTE permissions for user1 pertaining to stored procedure MyProc1.
|
Chapter contents
Prev topic: RESTRICT
|