SQL Statements › REVOKE › Description of Plan Security Diagram

Description of Plan Security Diagram

EXECUTE

Revokes the PLAN EXECUTE privilege.

BIND

Revokes the PLAN BIND privilege.

ON PLAN plan-name

Specifies the name of the plan from which the PLAN EXECUTE or PLAN BIND privilege is to be revoked.

FROM accessor-id

Specify the accessor ID of a user from whom you are revoking the privileges that were granted with a GRANT statement. This is a user's ID, not a schema auth-id.

FROM PUBLIC

Specify PUBLIC when you are granting or revoking the specified privileges to or from all users. A new user automatically has any privileges previously granted to the public.

FROM UNKNOWNUSER

Specify UNKNOWNUSER when you are revoking the specified privileges from users whose identities cannot be determined by the CA Datacom/DB security.

CASCADE

If CASCADE is specified, any other dependent privileges that have been granted to others (through the GRANT statement) are also revoked. If a REVOKE is issued without CASCADE and the grantee granted privileges to other users, the REVOKE is not permitted. The CASCADE option of REVOKE does not block the cascading effect of a revoke but operates instead as a fail-safe device. Specifying CASCADE simply acknowledges your understanding that there are cascading effects.

Following is the non-plan security syntax diagram for the REVOKE statement:

►►─ REVOKE ─┬─ ALL ──────────────────────────────┬─ ON ─┬─────────┬───────────►
            ├─ ALL PRIVILEGES ───────────────────┤      └─ TABLE ─┘
            │ ┌─ , ────────────────────────────┐ │
            └─▼─┬─ SELECT ───────────────────┬─┴─┘
                ├─ INSERT ───────────────────┤
                ├─ DELETE ───────────────────┤
                ├─ ALTER ────────────────────┤
                ├─ INDEX ────────────────────┤
                └─ UPDATE ─┬───────────────┬─┘
                           └─ column-list ─┘

   ┌─ , ──────────────┐          ┌─ , ───────────┐  
 ►─▼─┬─ table-name ─┬─┴─ FROM ─┬─▼─ accessor-id ─┴─┬─┬───────────┬────────────►
     └─ view-name ──┘          ├─ PUBLIC ──────────┤ └─ CASCADE ─┘
                               └─ UNKNOWNUSER ─────┘

 ►─┬─────────────────────────────────────────────┬────────────────────────────►◄
   │                         ┌─ , ───────────┐   │
   └─  ─┬───────────┬─ BY ─┬─▼─ accessor-id ─┴─┬─┘
        └─ GRANTED ─┘      └ ALL ──────────────┘