Syntax for Securing Database Resources › REVOKE Table Access Privileges › Usage

Usage

The ACCESS Keyword

When you use the ACCESS keyword with a GRANT statement, you grant a set of access privileges on a table-like object to one or more users or groups.

When you use the ACCESS keyword with a REVOKE statement, you revoke any access privileges that have been previously granted on the table or view from the specified users or groups.

This means that if you GRANT SELECT privilege on a table, you can revoke the privilege with either a REVOKE SELECT statement or a REVOKE ACCESS statement. Using REVOKE ACCESS is an efficient technique when you intend to revoke all access privileges on a table from a user or group, whether the privileges were granted singly or as a set.

Similarly, you can GRANT ACCESS on a table to a user and then REVOKE DELETE on the table from the same user as a way to grant all but one table access privilege.

Revoking Selected Privileges on a Table

The following statement revokes the SELECT and UPDATE privileges on the EMPLOYEE table associated with the current schema from users KRP, SAE, and PGD:

revoke select, update
   on employee
   from krp, sae, pgd;