15. REVOKE

15.1. Synopsis

REVOKE <privileges>

  ON { <entries> | <find_expression> }

  FROM <grantees>

find_expression ::=
  FIND (
    { TAG = <tag_value> | NOT TAG = <tag_value>
      | PREFIX = 'prefix' | SUFFIX = 'suffix' | TYPE = TS }
    [ AND ... ] [ , RECURSIVE = { TRUE | FALSE } ]
  )

tag_value ::= { 'text' | $table } [ || ... ]

15.2. Description

REVOKE removes the specified privileges from the specified users.

15.3. Parameters

privileges

The privileges to remove. The explicit privilege set for the entry overrides the default privileges of the user.

entries

The names of the entries to change.

grantees

The users from whom QuasarDB removes the privileges.

15.4. Examples

In these examples, Alice and Bob have the default SELECT privilege.

Remove the SELECT privilege from Alice for one table:

REVOKE SELECT ON table1 FROM Alice

The explicit privileges for table1 override the default privileges of Alice. Alice cannot select data from table1.

Remove the INSERT privilege from Bob for two tables:

REVOKE INSERT ON table1, table2 FROM Bob

Bob did not have the INSERT privilege before this statement. The statement does not change his access.