Syntax for Securing Database Resources › REVOKE Area Access Privileges › Parameters

Parameters

DBAREAD

Specifies that you are revoking DBAREAD privilege on the area named in the ON parameter from the users or groups named in the FROM parameter.

DBAWRITE

Specifies that you are revoking DBAWRITE privilege on the area named in the ON parameter from the users or groups named in the FROM parameter.

USE

Specifies that you are revoking USE privilege on the area named in the ON parameter from the users or groups named in the FROM parameter.

ON AREA segment-name.area-name

Identifies the area to which the specified area access privileges apply.

You can wildcard area-name when you revoke area access privileges. You cannot wildcard segment-name. The wildcard character is valid after the period following segment-name.

Note: For more information about wildcarding, see Using a Wildcard.

FROM

Specifies the users or groups from whom you are revoking area access privileges.

PUBLIC

Specifies all users.

The privileges must have been previously given to PUBLIC by means of the GRANT statement.

authorization-identifier

Identifies a user or group.

The privileges must have been previously given to authorization-identifier by means of the GRANT statement.

Note: Expanded syntax for authorization-identifier is presented in Notes on Security Statement Syntax.

Revoking Area Access Privileges

The following statement revokes an area access privilege from the specified user:

revoke dbawrite
  on area gl."account-area"
  from alex;

Note: For more information about granting the privilege to access an area, see GRANT Area Access Privileges.