Syntax for Securing Database Resources › REVOKE SQL Definition Privileges › Parameters

Parameters

DEFINE

Revokes the ALTER, CREATE, DISPLAY, and DROP privileges on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

ALTER

Revokes the ALTER privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

CREATE

Revokes the CREATE privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

DISPLAY

Revokes the DISPLAY privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

DROP

Revokes the DROP privilege on the resource identified in the ON parameter from the users or groups identified in the FROM parameter.

REFERENCES

Revokes the REFERENCES privilege on the table identified in the ON parameter from the users or groups identified in the FROM parameter.

ON

Specifies the resource to which the definition privileges apply.

ACCESS MODULE access-module-name

Identifies an access module.

Privileges on any version of access-module-name in the associated schema are revoked.

You can wildcard access-module-name. If you specify schema-name, the wildcard character is valid after the period following schema-name.

Note: For more information about wildcarding, see Using a Wildcard.

schema-name

Identifies the schema associated with access-module-name.

Note: For more information about using a schema name to qualify an access module name, see the CA IDMS SQL Reference Guide.

If you do not specify schema-name, it defaults to the current schema in effect for your session.

SCHEMA schema-name

Identifies an SQL schema.

You can wildcard schema-name.

Note: For more information about wildcarding, see Using a Wildcard.

table table-name

Identifies a table-like object.

You can wildcard any identifier in table-name when you grant definition privileges on table-name. If you specify schema-name in table-name, the wildcard character is valid after the period following schema-name.

Note: For more information about wildcarding, see Using a Wildcard.

If you do not specify schema-name, it defaults to the current schema in effect for your session.

FROM

Specifies the users or groups from whom you are revoking definition privileges.

PUBLIC

Specifies all users.

The privileges must have been previously given to PUBLIC by means of the GRANT statement.

authorization-identifier

Identifies a user or group.

The privileges must have been previously given to authorization-identifier by means of the GRANT statement.

Note: Expanded syntax for authorization-identifier is presented in Notes on Security Statement Syntax.