更新时间:2026-10-09 GMT+08:00
分享

撤销用户访问权限

语法格式

REVOKE <privilege>* ON <resource>* FROM <principal>*
  • privilege:要从主体撤销的对资源的权限
  • resource:撤销权限的实体
  • principal:撤销权限的用户/角色

代码示例

读/写/全部(读+写)- Dataset级别授权:
REVOKE READ_DATASET ON databases.demo_db1.datasets.demo_ds1 FROM USER normal_user1;
REVOKE WRITE_DATASET ON databases.demo_db1.datasets.demo_ds1 FROM USER normal_user1;
REVOKE ALL ON databases.demo_db1.datasets.demo_ds1 FROM USER normal_user1; 
REVOKE READ_DATASET ON databases.demo_db1.datasets.demo_ds1 FROM ROLE nit_role3;
REVOKE WRITE_DATASET ON databases.demo_db1.datasets.demo_ds1 FROM ROLE nit_role3;
REVOKE ALL ON databases.demo_db1.datasets.demo_ds1 FROM ROLE nit_role3; 

创建/列出 - Database级别授权:
REVOKE CREATE_DATASET ON databases.demo_db1 FROM USER normal_user1;
REVOKE LIST_DATASET ON databases.demo_db1 FROM USER normal_user1; 
REVOKE CREATE_DATASET ON databases.demo_db1 FROM ROLE nit_role3;
REVOKE LIST_DATASET ON databases.demo_db1 FROM ROLE nit_role3;

相关文档