Syntax for Securing Database Resources › REVOKE Access Module Execution Privilege › REVOKE Access Module Execution Privilege Parameters

REVOKE Access Module Execution Privilege Parameters

EXECUTE

Specifies that you are revoking execution privilege on the access module identified in the ON parameter from the users or group identified in the FROM parameter.

ON ACCESS MODULE

Specifies the access module to which execution privilege applies.

access-module-name

Identifies the access module.

You can wildcard access-module-name. If you specify schema-name, the wildcard character is valid after the period following schema-name.

Note: For more information about wildcarding, see Using a Wildcard.

schema-name

Identifies the schema with which access-module-name is associated.

If you do not specify schema-name, it defaults to the current schema associated with your session.

Note: For more information about using a schema name to qualify an access module name, see the CA IDMS SQL Reference Guide.

FROM

Specifies the users or groups from whom you are revoking execution privilege.

PUBLIC

Specifies all users.

The privilege must have been previously given to PUBLIC by means of the GRANT statement.

authorization-identifier

Identifies a user or group.

The privilege must have been previously given to authorization-identifier by means of the GRANT statement.

Note: Expanded syntax for authorization-identifier is presented in chapter Notes on Security Statement Syntax.

Revoking Execution Privilege

The following statement revokes execution privilege on all access modules associated with schema HR that begin with 'HR.EMP' from group PER_GRP_2:

revoke execute
   on access module hr.emp*
   from per_grp_2;

For more information about granting execution privilege, see GRANT Access Module Execution Privilege.