ibm-information-center/dist/eclipse/plugins/i5OS.ic.db2_5.4.0.1/rbafzmstrudtp.htm

138 lines
7.8 KiB
HTML
Raw Permalink Normal View History

2024-04-02 14:02:31 +00:00
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="dc.language" scheme="rfc1766" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<meta name="dc.date" scheme="iso8601" content="2005-09-19" />
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow"/>
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="keywords" content="REVOKE (Distinct Type Privileges) statement,
REVOKE (Distinct Type Privileges), SQL statements, ALL clause,
ALL PRIVILEGES clause, ALTER clause, USAGE clause, ON DISTINCT TYPE clause,
in REVOKE (Distinct Type Privileges) statement, distinct-type-name, FROM clause,
authorization-name, PUBLIC clause" />
<title>REVOKE (Distinct Type Privileges)</title>
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
<link rel="stylesheet" type="text/css" href="ic.css" />
</head>
<body>
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
<a name="rudtp"></a>
<h2 id="rudtp"><a href="rbafzmst02.htm#ToC_1219">REVOKE (Distinct Type Privileges)</a></h2><a id="idx3011" name="idx3011"></a><a id="idx3012" name="idx3012"></a>
<p>This form of the REVOKE statement removes the privileges on a distinct type.</p>
<a name="wq1682"></a>
<h3 id="wq1682"><a href="rbafzmst02.htm#ToC_1220">Invocation</a></h3>
<p>This statement can be embedded in an application program or issued interactively.
It is an executable statement that can be dynamically prepared.</p>
<a name="wq1683"></a>
<h3 id="wq1683"><a href="rbafzmst02.htm#ToC_1221">Authorization</a></h3>
<p>The privileges held by the authorization ID of the statement must include
at least one of the following: </p>
<ul>
<li>For each distinct type identified in the statement:
<ul>
<li>Every privilege specified in the statement</li>
<li>The system authority of *OBJMGT on the distinct type</li>
<li>The system authority *EXECUTE on the library containing the distinct type</li></ul></li>
<li>Administrative authority</li></ul>
<a name="wq1684"></a>
<h3 id="wq1684"><a href="rbafzmst02.htm#ToC_1222">Syntax</a></h3>
<a href="rbafzmstrudtp.htm#synsrevoket"><img src="c.gif" alt="Click to skip syntax diagram" /></a>
<pre class="cgraphic"><span><img src="c.gif" alt="Read syntax diagram" longdesc="rbafzmstsyn367.htm"
border="0" /></span><a href="#skipsyn-366"><img src="c.gif" alt="Skip visual syntax diagram"
border="0" /></a> .-PRIVILEGES-.
>>-REVOKE--+-ALL--+------------+-+------------------------------>
| .-,---------. |
| V | |
'---+-ALTER-+-+-------'
'-USAGE-'
.-,------------------.
.-DISTINCT-. V |
>--ON--+----------+--TYPE----<span class="italic">distinct-type-name</span>-+--------------->
.-,----------------------.
V |
>--FROM----+-<span class="italic">authorization-name</span>-+-+---------------------------->&lt;
'-PUBLIC-------------'
</pre>
<a name="skipsyn-366" id="skipsyn-366"></a>
<a name="synsrevoket"></a>
<h3 id="synsrevoket"><a href="rbafzmst02.htm#ToC_1223">Description</a></h3>
<dl class="parml">
<dt class="bold">ALL <span class="base">or</span> ALL PRIVILEGES</dt><a id="idx3013" name="idx3013"></a><a id="idx3014" name="idx3014"></a>
<dd>Revokes one or more distinct type privileges from each <span class="italic">authorization-name</span>. The privileges revoked are those privileges on the identified distinct types
that were granted to the <span class="italic">authorization-names</span>. Note
that revoking ALL PRIVILEGES on a distinct type is not the same as revoking the system
authority of *ALL.
<p>If you do not use ALL, you must use one or more of the
keywords listed below. Each keyword revokes the privilege described.</p>
</dd>
<dt class="bold">ALTER </dt><a id="idx3015" name="idx3015"></a>
<dd>Revokes the privilege to use the COMMENT statement.
</dd>
<dt class="bold">USAGE </dt><a id="idx3016" name="idx3016"></a>
<dd>Revokes the privilege to use distinct types in tables, functions, procedures,
or as the source type in a CREATE DISTINCT TYPE statement.
</dd>
<dt class="bold">ON DISTINCT TYPE <var class="pv">distinct-type-name</var> </dt><a id="idx3017" name="idx3017"></a><a id="idx3018" name="idx3018"></a>
<dd>Identifies the distinct types from which you are revoking privileges. The <span class="italic">distinct-type-name</span> must identify a distinct type that exists at the current
server.
</dd>
<dt class="bold">FROM </dt><a id="idx3019" name="idx3019"></a>
<dd>Identifies from whom the privileges are revoked.
<dl class="parml">
<dt class="bold"><var class="pv">authorization-name,...</var> </dt><a id="idx3020" name="idx3020"></a>
<dd>Lists one or more authorization IDs. Do not specify the same <span class="italic">authorization-name</span> more than once.
</dd>
<dt class="bold">PUBLIC </dt><a id="idx3021" name="idx3021"></a>
<dd>Revokes the specified privileges from PUBLIC.
</dd>
</dl>
</dd>
</dl>
<a name="wq1685"></a>
<h3 id="wq1685"><a href="rbafzmst02.htm#ToC_1224">Notes</a></h3>
<p><span class="bold">Multiple grants:</span> If authorization ID A granted the
same privilege to authorization ID B more than once, revoking that privilege
from B nullifies all those grants.</p>
<p><span class="bold">Revoking WITH GRANT OPTION:</span> The only way to revoke
the WITH GRANT OPTION is to revoke ALL.</p>
<p><span class="bold">Privilege warning:</span> Revoking a specific privilege
from a user does not necessarily prevent that user from performing an action
that requires that privilege. For example, the user may still have the privilege
through PUBLIC or administrative privileges.</p>
<p><span class="bold">Corresponding system authorities:</span> When a distinct type privilege
is revoked, the corresponding system authorities are revoked. For information
on the system authorities that correspond to SQL privileges see <a href="rbafzmstgntudtp.htm#gntudtp">GRANT (Distinct Type Privileges)</a>.</p>
<p><span class="bold">Syntax alternatives:</span> The following keywords are synonyms
supported for compatibility to prior releases. These keywords are non-standard
and should not be used:</p>
<ul>
<li>The keyword DATA can be used as a synonym for DISTINCT.</li></ul>
<a name="wq1686"></a>
<h3 id="wq1686"><a href="rbafzmst02.htm#ToC_1225">Example</a></h3>
<p>Revoke the USAGE privilege on distinct type SHOESIZE from user JONES. </p>
<pre class="xmp"> <span class="bold">REVOKE USAGE</span>
<span class="bold">ON DISTINCT TYPE</span> SHOESIZE
<span class="bold">FROM</span> JONES</pre><a id="idx3022" name="idx3022"></a><a id="idx3023" name="idx3023"></a>
<hr /><br />
[ <a href="#Top_Of_Page">Top of Page</a> | <a href="rbafzmstrena.htm">Previous Page</a> | <a href="rbafzmstrppro.htm">Next Page</a> | <a href="rbafzmst02.htm#wq1">Contents</a> |
<a href="rbafzmstindex.htm#index">Index</a> ]
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
</body>
</html>