Syntax for Securing Database Resources › REVOKE Physical Database Definition Privileges › Parameters

Parameters

DEFINE

Revokes the ALTER, CREATE, DISPLAY, DROP, and USE privileges on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

ALTER

Revokes the ALTER privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

CREATE

Revokes the CREATE privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

DISPLAY

Revokes the DISPLAY privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

DROP

Revokes the DROP privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

USE

Revokes the USE privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

ON

Specifies the resource to which the definition privileges apply.

DMCL dmcl-name

Identifies a DMCL.

You can wildcard dmcl-name.

Note: For more information about wildcarding, see Using a Wildcard.

DBTABLE dbtable-name

Identifies a database name table.

You can wildcard dbtable-name.

Note: For more information about wildcarding, see Using a Wildcard. .

DB database-name

Identifies a segment or a name in the database name table.

You can wildcard database-name.

Note: For more information about wildcarding, see Using a Wildcard.

FROM

Specifies the users or groups from whom you are revoking definition privileges.

PUBLIC

Specifies all users.

The privileges must have been previously given to PUBLIC by means of the GRANT statement.

authorization-identifier

Identifies a user or group.

The privileges must have been previously given to authorization-identifier by means of the GRANT statement.

Note: Expanded syntax for authorization-identifier is presented in Notes on Security Statement Syntax.