1999-07-22 17:09:15 +02:00
|
|
|
<!--
|
2001-05-27 11:59:30 +02:00
|
|
|
$Header: /cvsroot/pgsql/doc/src/sgml/ref/revoke.sgml,v 1.14 2001/05/27 09:59:28 petere Exp $
|
1999-07-22 17:09:15 +02:00
|
|
|
Postgres documentation
|
|
|
|
-->
|
|
|
|
|
1999-06-14 09:37:05 +02:00
|
|
|
<refentry id="SQL-REVOKE">
|
|
|
|
<refmeta>
|
2001-05-27 11:59:30 +02:00
|
|
|
<refentrytitle>REVOKE</refentrytitle>
|
1999-06-14 09:37:05 +02:00
|
|
|
<refmiscinfo>SQL - Language Statements</refmiscinfo>
|
|
|
|
</refmeta>
|
2001-05-27 11:59:30 +02:00
|
|
|
|
1999-06-14 09:37:05 +02:00
|
|
|
<refnamediv>
|
2001-05-27 11:59:30 +02:00
|
|
|
<refname>REVOKE</refname>
|
|
|
|
<refpurpose>Revokes access privilege from a user, a group, or all users.</refpurpose>
|
1999-06-14 09:37:05 +02:00
|
|
|
</refnamediv>
|
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<refsynopsisdiv>
|
|
|
|
<synopsis>
|
|
|
|
REVOKE { { SELECT | INSERT | UPDATE | DELETE | RULE | REFERENCES | TRIGGER } [,...] | ALL [ PRIVILEGES ] }
|
|
|
|
ON [ TABLE ] <replaceable class="PARAMETER">object</replaceable> [, ...]
|
|
|
|
FROM { <replaceable class="PARAMETER">username</replaceable> | GROUP <replaceable class="PARAMETER">groupname</replaceable> | PUBLIC }
|
|
|
|
</synopsis>
|
1999-06-14 09:37:05 +02:00
|
|
|
</refsynopsisdiv>
|
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<refsect1 id="SQL-REVOKE-description">
|
|
|
|
<title>Description</title>
|
|
|
|
|
1999-06-14 09:37:05 +02:00
|
|
|
<para>
|
2001-05-27 11:59:30 +02:00
|
|
|
<command>REVOKE</command> allows the creator of an object to revoke
|
|
|
|
permissions granted before, from a users or a group of users. The
|
|
|
|
key word <literal>PUBLIC</literal> means to revoke this privilege
|
|
|
|
from all users.
|
1999-06-14 09:37:05 +02:00
|
|
|
</para>
|
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<para>
|
|
|
|
See the description of the <xref linkend="sql-grant"> command for
|
|
|
|
the meaning of the privilege types.
|
|
|
|
</para>
|
|
|
|
</refsect1>
|
1999-07-06 19:16:42 +02:00
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<refsect1 id="SQL-REVOKE-notes">
|
|
|
|
<title>Notes</title>
|
1999-06-14 09:37:05 +02:00
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<para>
|
|
|
|
Use <xref linkend="app-psql">'s <command>\z</command> command to
|
|
|
|
display the privileges granted on existing objects. See also <xref
|
|
|
|
linkend="sql-grant"> for information about the format.
|
|
|
|
</para>
|
1999-06-14 09:37:05 +02:00
|
|
|
</refsect1>
|
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<refsect1 id="SQL-REVOKE-examples">
|
|
|
|
<title>Examples</title>
|
|
|
|
|
1999-06-14 09:37:05 +02:00
|
|
|
<para>
|
1999-07-06 19:16:42 +02:00
|
|
|
Revoke insert privilege from all users on table
|
|
|
|
<literal>films</literal>:
|
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<programlisting>
|
1999-06-14 09:37:05 +02:00
|
|
|
REVOKE INSERT ON films FROM PUBLIC;
|
2001-05-27 11:59:30 +02:00
|
|
|
</programlisting>
|
1999-07-06 19:16:42 +02:00
|
|
|
</para>
|
|
|
|
|
|
|
|
<para>
|
|
|
|
Revoke all privileges from user <literal>manuel</literal> on view <literal>kinds</literal>:
|
1999-06-14 09:37:05 +02:00
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<programlisting>
|
|
|
|
REVOKE ALL PRIVILEGES ON kinds FROM manuel;
|
|
|
|
</programlisting>
|
1999-06-14 09:37:05 +02:00
|
|
|
</para>
|
|
|
|
</refsect1>
|
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<refsect1 id="SQL-REVOKE-compatibility">
|
|
|
|
<title>Compatibility</title>
|
1999-06-14 09:37:05 +02:00
|
|
|
|
2001-05-27 11:59:30 +02:00
|
|
|
<refsect2>
|
|
|
|
<title>SQL92</title>
|
1999-07-22 17:09:15 +02:00
|
|
|
|
1999-06-14 09:37:05 +02:00
|
|
|
<para>
|
2001-05-27 11:59:30 +02:00
|
|
|
The compatibility notes of the <xref linkend="sql-grant"> command
|
|
|
|
apply analogously to <command>REVOKE</command>. The syntax summary is:
|
|
|
|
|
|
|
|
<synopsis>
|
|
|
|
REVOKE [ GRANT OPTION FOR ] { SELECT | INSERT | UPDATE | DELETE | REFERENCES }
|
|
|
|
ON <replaceable class="parameter">object</replaceable> [ ( <replaceable class="parameter">column</replaceable> [, ...] ) ]
|
|
|
|
FROM { PUBLIC | <replaceable class="parameter">username</replaceable> [, ...] }
|
|
|
|
{ RESTRICT | CASCADE }
|
|
|
|
</synopsis>
|
1999-06-14 09:37:05 +02:00
|
|
|
</para>
|
|
|
|
|
|
|
|
<para>
|
|
|
|
If user1 gives a privilege WITH GRANT OPTION to user2,
|
|
|
|
and user2 gives it to user3 then user1 can revoke
|
|
|
|
this privilege in cascade using the CASCADE keyword.
|
|
|
|
If user1 gives a privilege WITH GRANT OPTION to user2,
|
2000-10-12 23:23:34 +02:00
|
|
|
and user2 gives it to user3, then if user1 tries to revoke
|
2000-10-05 21:48:34 +02:00
|
|
|
this privilege it fails if he specify the RESTRICT
|
1999-06-14 09:37:05 +02:00
|
|
|
keyword.
|
|
|
|
</para>
|
|
|
|
</refsect2>
|
|
|
|
</refsect1>
|
2001-05-27 11:59:30 +02:00
|
|
|
|
|
|
|
<refsect1>
|
|
|
|
<title>See Also</title>
|
|
|
|
|
|
|
|
<simpara>
|
|
|
|
<xref linkend="sql-grant">
|
|
|
|
</simpara>
|
|
|
|
</refsect1>
|
|
|
|
|
1999-06-14 09:37:05 +02:00
|
|
|
</refentry>
|
|
|
|
|
|
|
|
<!-- Keep this comment at the end of the file
|
|
|
|
Local variables:
|
|
|
|
mode: sgml
|
|
|
|
sgml-omittag:nil
|
|
|
|
sgml-shorttag:t
|
|
|
|
sgml-minimize-attributes:nil
|
|
|
|
sgml-always-quote-attributes:t
|
|
|
|
sgml-indent-step:1
|
|
|
|
sgml-indent-data:t
|
|
|
|
sgml-parent-document:nil
|
|
|
|
sgml-default-dtd-file:"../reference.ced"
|
|
|
|
sgml-exposed-tags:nil
|
|
|
|
sgml-local-catalogs:"/usr/lib/sgml/catalog"
|
|
|
|
sgml-local-ecat-files:nil
|
|
|
|
End:
|
|
|
|
-->
|