REVOKE priv_type [(column_list)] [, priv_type [(column_list)]] ... ON [object_type] priv_level FROM user [, user] ... REVOKE ALL PRIVILEGES, GRANT OPTION FROM user [, user] ...
The REVOKE
statement enables system administrators to revoke privileges (or roles - see section below) from MariaDB accounts. Each account is named using the same format as for the GRANT
statement; for example, 'jeffrey'@'localhost
'. If you specify only the user name part of the account name, a host name part of '
' is used. For details on the levels at which privileges exist, the allowable %
priv_type
and priv_level
values, and the syntax for specifying users and passwords, see GRANT
.
To use the first REVOKE
syntax, you must have the GRANT OPTION
privilege, and you must have the privileges that you are revoking.
To revoke all privileges, use the second syntax, which drops all global, database, table, column, and routine privileges for the named user or users:
REVOKE ALL PRIVILEGES, GRANT OPTION FROM user [, user] ...
To use this REVOKE
syntax, you must have the global CREATE USER
privilege or the UPDATE
privilege for the mysql database. See GRANT
.
REVOKE SUPER ON *.* FROM 'alexander'@'localhost';
Roles were introduced in MariaDB 10.0.5.
REVOKE role [, role ...] FROM grantee [, grantee2 ... ]
REVOKE
is also used to remove a role from a user or another role that it's previously been assigned to. If a role has previously been set as a default role, REVOKE
does not remove the record of the default role from the mysql.user
table. If the role is subsequently granted again, it will again be the user's default. Use SET DEFAULT ROLE NONE
to explicitly remove this.
Before MariaDB 10.1.13, the REVOKE role
statement was not permitted in prepared statements.
REVOKE journalist FROM hulda
© 2019 MariaDB
Licensed under the Creative Commons Attribution 3.0 Unported License and the GNU Free Documentation License.
https://mariadb.com/kb/en/revoke/