REVOKE <privileges>
REVOKE <privileges> 语句用于删除已有用户的权限。执行 REVOKE <privileges> 语句需要拥有分配的权限,并且拥有 GRANT OPTION 权限。
语法图
GrantStmt

PrivElemList

PrivElem

PrivType

ObjectType

PrivLevel

UserSpecList

1. GrantStmt ::=
2. 'GRANT' PrivElemList 'ON' ObjectType PrivLevel 'TO' UserSpecList RequireClauseOpt WithGrantOptionOpt
4. PrivElemList ::=
5. PrivElem ( ',' PrivElem )*
7. PrivElem ::=
8. PrivType ( '(' ColumnNameList ')' )?
10. PrivType ::=
11. 'ALL' 'PRIVILEGES'?
12. | 'ALTER' 'ROUTINE'?
13. | 'CREATE' ( 'USER' | 'TEMPORARY' 'TABLES' | 'VIEW' | 'ROLE' | 'ROUTINE' )?
14. | 'TRIGGER'
15. | 'DELETE'
16. | 'DROP' 'ROLE'?
17. | 'PROCESS'
18. | 'EXECUTE'
19. | 'INDEX'
20. | 'INSERT'
21. | 'SELECT'
22. | 'SUPER'
23. | 'SHOW' ( 'DATABASES' | 'VIEW' )
24. | 'UPDATE'
25. | 'GRANT' 'OPTION'
26. | 'REFERENCES'
27. | 'REPLICATION' ( 'SLAVE' | 'CLIENT' )
28. | 'USAGE'
29. | 'RELOAD'
30. | 'FILE'
31. | 'CONFIG'
32. | 'LOCK' 'TABLES'
33. | 'EVENT'
34. | 'SHUTDOWN'
36. ObjectType ::=
37. 'TABLE'?
39. PrivLevel ::=
40. '*' ( '.' '*' )?
41. | Identifier ( '.' ( '*' | Identifier ) )?
43. UserSpecList ::=
44. UserSpec ( ',' UserSpec )*
示例
1. CREATE USER 'newuser' IDENTIFIED BY 'mypassword';
1. Query OK, 1 row affected (0.02 sec)
1. GRANT ALL ON test.* TO 'newuser';
1. Query OK, 0 rows affected (0.03 sec)
1. SHOW GRANTS FOR 'newuser';
1. +-------------------------------------------------+
2. | Grants for newuser@% |
3. +-------------------------------------------------+
4. | GRANT USAGE ON *.* TO 'newuser'@'%' |
5. | GRANT ALL PRIVILEGES ON test.* TO 'newuser'@'%' |
6. +-------------------------------------------------+
7. 2 rows in set (0.00 sec)
1. REVOKE ALL ON test.* FROM 'newuser';
1. Query OK, 0 rows affected (0.03 sec)
1. SHOW GRANTS FOR 'newuser';
1. +-------------------------------------+
2. | Grants for newuser@% |
3. +-------------------------------------+
4. | GRANT USAGE ON *.* TO 'newuser'@'%' |
5. +-------------------------------------+
6. 1 row in set (0.00 sec)
1. DROP USER 'newuser';
1. Query OK, 0 rows affected (0.14 sec)
1. SHOW GRANTS FOR 'newuser';
1. ERROR 1141 (42000): There is no such grant defined for user 'newuser' on host '%'
MySQL 兼容性
REVOKE <privileges> 语句与 MySQL 完全兼容。如发现任何兼容性差异,请在 GitHub 上提交 issue。
