REVOKE SYSTEM PRIVILEGE

Revokes system privileges from one or more idents.

 

Usage

Embedded, Interactive, Module, ODBC, JDBC.

Description

The specified system privilege is revoked from the ident(s) listed. If the privilege is revoked from a GROUP ident, all members of the group lose the privilege.

The system privileges are described under GRANT SYSTEM PRIVILEGE.

The GRANT OPTION FOR clause specifies that only the WITH GRANT OPTION is to be revoked from the specified instance(s) of the privilege.

The keywords CASCADE and RESTRICT specifies whether the REVOKE statement will allow recursive effects if the privilege was given with grant option. If CASCADE is specified recursive effects will be allowed, else an error will be returned and the privilege is not revoked.

If neither CASCADE nor RESTRICT is specified, then RESTRICT is implicit.

Restrictions

Privileges can only be revoked explicitly by the grantor.

Notes

If a system privilege has been granted to the same ident more than once (by different grantors), the REVOKE statement will only revoke (or will revoke the WITH GRANT OPTION from) the single instance of the privilege that was granted by the current ident.

The system rights attached to the privilege (or the WITH GRANT OPTION) will only be revoked when the last instance of the privilege has been revoked.

Revoking system privileges has recursive effects on instances of the privilege being granted to other idents by virtue of the WITH GRANT option.

When the last instance of a privilege WITH GRANT OPTION is revoked, all instances of the privilege granted by the ident under that authorization are recursively revoked.

Databanks, idents, shadows or schemas created while the privilege was held are not dropped when the privilege is revoked.

An ident may not revoke privileges from itself.

Example

REVOKE DATABANK FROM joe, jane RESTRICT;

 

For more information, see the Mimer SQL User's Manual, Revoking System Privileges.

Standard Compliance