Chapter 9 SQL Statements
595
REVOKE statement
Use this statement to remove permissions for the specified users.
REVOKE {
CONNECT,
DBA,
INTEGRATED LOGIN,
GROUP,
MEMBERSHIP IN GROUP
userid
, …
RESOURCE,
}
..FROM
userid
, …
REVOKE {
ALL [PRIVILEGES]
ALTER,
DELETE,
INSERT,
REFERENCES [ (
column-name
, …) ],
SELECT [ (
column-name
, …) ],
UPDATE [ (
column-name
, …) ],
}
… ON [
owner
.]
table-name
FROM
userid
, …
REVOKE EXECUTE ON [
owner
.]
procedure-name
FROM
userid
, …
Must be the grantor of the permissions that are being revoked or have DBA
authority.
If you are revoking CONNECT permissions or table permissions from
another user, the other user must not be connected to the database.
Automatic commit.
"GRANT statement" on page 540
The REVOKE statement removes permissions given using the GRANT
statement. Form 1 revokes special user permissions. Form 2 revokes table
permissions. Form 3 revokes permission to execute a procedure.
REVOKE CONNECT removes a user ID from a database, and also destroys
any objects (tables, views, procedures, etc.) owned by that user and any
permissions granted by that user. REVOKE GROUP automatically
REVOKES MEMBERSHIP from all members of the group.
If you give a user GRANT option permission, then later revoke that
permission, you also revoke any permissions that user granted to others
while they had the GRANT option.
Function
Syntax 1
Syntax 2
Syntax 3
Permissions
Side effects
See also
Description