Revoking a Permission
Function
This statement is used to revoke permissions granted to a user or role.
Syntax
1
|
REVOKE (privilege,...) ON (resource,..) FROM ((ROLE [db_name].role_name) | (USER user_name)),...); |
Keywords
ROLE: The subsequent role_name must be a role.
USER: The subsequent user_name must be a user.
Precautions
- The privilege must be the granted permissions of the authorized object in the resource. Otherwise, the permission fails to be revoked. For details about the permission types supported by the privilege, see Data Permissions List.
- The resource can be a queue, database, table, view, or column. The formats are as follows:
- Queue format: queues.queue_name
- Database format: databases.db_name
- Table format: databases.db_name.tables.table_name
- View format: databases.db_name.tables.view_name
- Column format: databases.db_name.tables.table_name.columns.column_name
Example
To revoke the permission of user user_name1 to delete database db1, run the following statement:
1
|
REVOKE DROP_DATABASE ON databases.db1 FROM USER user_name1; |
To revoke the SELECT permission of user user_name1 on table tb1 in database db1, run the following statement:
1
|
REVOKE SELECT ON databases.db1.tables.tb1 FROM USER user_name1; |
To revoke the SELECT permission of role role_name on table tb1 in database db1, run the following statement:
1
|
REVOKE SELECT ON databases.db1.tables.tb1 FROM ROLE role_name; |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot