11. Revoke

11.1. Synopsis

REVOKE <privileges>

  ON { <entries> | <find_expression> }

  FROM <grantees>

find_expression ::=
  FIND ( { <type_expression> | <tag_expression> | NOT <tag_expression> } [ AND ... ] )

tag_expression ::=
  TAG = 'tag_name'

type_expression ::=
  TYPE = { BLOB | DEQUE | HSET | INT | INTEGER | STREAM | TAG | TS }

11.2. Description

GRANT will revoke the specified privileges on the entries listed from the grantees listed.

11.3. Parameters

privileges

The name of the entries for which the privileges should be revoked. The privileges will be merged with previously specified privileges for the entry. If no previous privileges are specified for that entry, then the default privileges of the user will be merged with the granted privileges.

entries

The name of the entries to modify privileges.

grantees

The list of grantees to revoke privileges from.

11.4. Examples

In the following examples, Alice and Bob have the SELECT default privileges.

Revoke from user Alice the SELECT privilege on a table:

REVOKE SELECT ON table1 FROM Alice

Since Alice had the SELECT default privilege, now Alice can no longer do SELECT operations on table1.

Revoke fom the user Bob the INSERT privilege on two tables:

REVOKE INSERT ON table1, table2 FROM Bob

Since Bob had the SELECT default privilege, revoking the INSERT privilege on table1 an table2 does not change anything for Bob who could not insert in the first place.