OpenEdge Data Management:<br />SQL Development Revoking privileges

Release 10.1A: OpenEdge Data Management:
SQL Development

Revoking privileges

The REVOKE statement can be used for a wide variety of purposes. It can revoke a single user’s access to a single column or it can revoke the public’s privilege to access an entire database.

Privileges are revoked in the same manner in which they are granted—database-wide or table-specific.

The syntax for using the REVOKE statement to revoke database-wide privileges is:
Syntax
REVOKE { RESOURCE, DBA, AUDIT_ADMIN, AUDIT_ARCHIVE, AUDIT_INSERT } 
FROM { username [, username ], ...} 
[ RESTRICT | CASCADE ] 
; 
Notes: Only the user who granted an audit-related privilege can revoke it.
CASCADE is not supported for the revocation of audit-related privileges.

The syntax for using the REVOKE statement to revoke table-specific privileges is:
Syntax
REVOKE [ GRANT OPTION FOR ] { privilege [, privilege ], ... | ALL 
[ PRIVILEGES ]} ON table_name 
FROM { username[,username], ... | PUBLIC } [RESTRICT | CASCADE];  
where privilege is: 
{ EXECUTE | SELECT | INSERT | DELETE | INDEX | 
UPDATE [(COLUMN, COLUMN, ...)] | REFERENCES [(COLUMN, COLUMN, ...)]}; 
The REVOKE statement can be used to remit the privileges previously granted to 'GPS', as shown in Example 4–7.
Example 4–7: REVOKE statement
REVOKE UPDATE 
ON Item (ItemNum, ItemName, CatDescription) 
FROM "GPS"; 
If the REVOKE statement specifies RESTRICT, SQL checks to see if the privilege being revoked was passed on to other users. This is possible only if the original privilege included the WITH GRANT OPTION clause. If so, the REVOKE statement fails and generates an error. If the privilege was not passed on, the REVOKE statement succeeds.

If the REVOKE statement specifies CASCADE, revoking the access privileges from a user also revokes the privileges from all users who received the privilege from that user.

If the REVOKE statement specifies neither RESTRICT nor CASCADE, the behavior is the same as for CASCADE.

For detailed information on the REVOKE statement, see OpenEdge Data Management: SQL Reference .