Previous Topic: Deleting Access RightsNext Topic: Binding of GRANT and REVOKE Statements


Cascading of REVOKE and DROP

Issuing a REVOKE statement or dropping a table or view may have cascading effects on other authorizations. If a user has the authority to grant access rights to other users, revoking access rights of that user to a table or view automatically revokes any access rights to that table or view which that user had granted to other users. This cascading action ensures that all authorizations which depended on the original authorization are also revoked. There are also situations where views may be dropped as the result of a REVOKE statement. For more information, see Data Control Language (DCL) Operations.

Execute rights for a plan are dropped if the "binder" of the plan loses (by the use of the SQL REVOKE statement) access to a resource used in the plan. This is not true, however, if the access is derived from the use of external security.