Difference between revisions of "REVOKE"

From Lianjapedia
Jump to: navigation, search
Line 16: Line 16:
 
To revoke access privileges for users to tables.  The REVOKE statement can only remove existing user privileges given with the GRANT statement.  To revoke privileges you must be the owner of the table or have already been granted ALTER privileges.
 
To revoke access privileges for users to tables.  The REVOKE statement can only remove existing user privileges given with the GRANT statement.  To revoke privileges you must be the owner of the table or have already been granted ALTER privileges.
  
{| class="wikitable"
+
{| class="wikitable" width=100%
!Keywords||Description
+
!width=25%|Keywords||Description
 
|-
 
|-
 
|ALL||All privileges are revoked.
 
|ALL||All privileges are revoked.
 
|-
 
|-
|SELECT||The ability to name any column in a SELECT statement.  The privilege can be restricted to one or more columns by listing them.
+
|valign="top"|SELECT||The ability to name any column in a SELECT statement.  The privilege can be restricted to one or more columns by listing them.
 
|-
 
|-
|UPDATE||The ability to name any column in an UPDATE statement.  The privilege can be restricted to one or more columns by listing them.
+
|valign="top"|UPDATE||The ability to name any column in an UPDATE statement.  The privilege can be restricted to one or more columns by listing them.
 
|-
 
|-
|INSERT||The ability to INSERT rows into the table.
+
|valign="top"|INSERT||The ability to INSERT rows into the table.
 
|-
 
|-
|DELETE||The ability to DELETE rows from the table.  
+
|valign="top"|DELETE||The ability to DELETE rows from the table.  
 
|-
 
|-
|ALTER||The data type to be stored in that column, and the applicable length or precision.
+
|valign="top"|ALTER||The data type to be stored in that column, and the applicable length or precision.
 
|-
 
|-
|READ ONLY||The ability to read from any column in a SELECT statement.  The privilege can be restricted to one or more columns by listing them.  
+
|valign="top"|READ ONLY||The ability to read from any column in a SELECT statement.  The privilege can be restricted to one or more columns by listing them.  
 
|-
 
|-
|database||The name of the database to which the table belongs.  The '!' character must be included between the database name and the table name.
+
|valign="top"|database||The name of the database to which the table belongs.  The '!' character must be included between the database name and the table name.
 
|-
 
|-
|table||The name of the table from which to revoke the privileges.
+
|valign="top"|table||The name of the table from which to revoke the privileges.
 
|-
 
|-
|user||The user access control string that will be revoked from the privilege.  User access control strings are defined by the operating system.
+
|valign="top"|user||The user access control string that will be revoked from the privilege.  User access control strings are defined by the operating system.
 
|-
 
|-
|group||The group access control string that will be revoked the privilege.  Group access control strings are defined by the operating system.
+
|valign="top"|group||The group access control string that will be revoked the privilege.  Group access control strings are defined by the operating system.
 
|-
 
|-
|PUBLIC||All users and groups will be revoked privileges
+
|valign="top"|PUBLIC||All users and groups will be revoked privileges
 
|-
 
|-
 
|}
 
|}

Revision as of 06:35, 22 January 2013

Purpose

Revoke access privileges for users to tables.

Syntax

REVOKE ALL | [SELECT [(<column> [,...])]] [UPDATE [(<column> [,...])]]

[INSERT] [DELETE] [ALTER] [READ ONLY [(<column> [,...])]

ON [<database>!]<table> FROM '<user>,<group>' [,...] | PUBLIC

See Also

ALTER TABLE, CREATE TABLE, GETENV(), GRANT

Description

To revoke access privileges for users to tables. The REVOKE statement can only remove existing user privileges given with the GRANT statement. To revoke privileges you must be the owner of the table or have already been granted ALTER privileges.

Keywords Description
ALL All privileges are revoked.
SELECT The ability to name any column in a SELECT statement. The privilege can be restricted to one or more columns by listing them.
UPDATE The ability to name any column in an UPDATE statement. The privilege can be restricted to one or more columns by listing them.
INSERT The ability to INSERT rows into the table.
DELETE The ability to DELETE rows from the table.
ALTER The data type to be stored in that column, and the applicable length or precision.
READ ONLY The ability to read from any column in a SELECT statement. The privilege can be restricted to one or more columns by listing them.
database The name of the database to which the table belongs. The '!' character must be included between the database name and the table name.
table The name of the table from which to revoke the privileges.
user The user access control string that will be revoked from the privilege. User access control strings are defined by the operating system.
group The group access control string that will be revoked the privilege. Group access control strings are defined by the operating system.
PUBLIC All users and groups will be revoked privileges

Example

// Revoke update privilege for columns lastname and firstname and insert on the table
REVOKE UPDATE (lastname, firstname) INSERT;
  ON customer;
  FROM '[20,100]'
 
// Grant all privileges to all users
REVOKE ALL;
  ON test;
  FROM PUBLIC