REVOKE <privileges>

REVOKE <privileges> 语句用于删除已有用户的权限。执行 REVOKE <privileges> 语句需要拥有分配的权限，并且拥有 GRANT OPTION 权限。

语法图

GrantStmt

REVOKE - 图1

PrivElemList

REVOKE - 图2

PrivElem

REVOKE - 图3

PrivType

REVOKE - 图4

ObjectType

REVOKE - 图5

PrivLevel

REVOKE - 图6

UserSpecList

REVOKE - 图7

1. GrantStmt ::=
2. 'GRANT' PrivElemList 'ON' ObjectType PrivLevel 'TO' UserSpecList RequireClauseOpt WithGrantOptionOpt

4. PrivElemList ::=
5. PrivElem ( ',' PrivElem )*

7. PrivElem ::=
8. PrivType ( '(' ColumnNameList ')' )?

10. PrivType ::=
11. 'ALL' 'PRIVILEGES'?
12. |   'ALTER' 'ROUTINE'?
13. |   'CREATE' ( 'USER' | 'TEMPORARY' 'TABLES' | 'VIEW' | 'ROLE' | 'ROUTINE' )?
14. |    'TRIGGER'
15. |   'DELETE'
16. |    'DROP' 'ROLE'?
17. |    'PROCESS'
18. |    'EXECUTE'
19. |   'INDEX'
20. |   'INSERT'
21. |   'SELECT'
22. |   'SUPER'
23. |    'SHOW' ( 'DATABASES' | 'VIEW' )
24. |   'UPDATE'
25. |   'GRANT' 'OPTION'
26. |   'REFERENCES'
27. |   'REPLICATION' ( 'SLAVE' | 'CLIENT' )
28. |   'USAGE'
29. |    'RELOAD'
30. |   'FILE'
31. |   'CONFIG'
32. |   'LOCK' 'TABLES'
33. |    'EVENT'
34. |   'SHUTDOWN'

36. ObjectType ::=
37. 'TABLE'?

39. PrivLevel ::=
40. '*' ( '.' '*' )?
41. |    Identifier ( '.' ( '*' | Identifier ) )?

43. UserSpecList ::=
44. UserSpec ( ',' UserSpec )*

示例

1. CREATE USER 'newuser' IDENTIFIED BY 'mypassword';

1. Query OK, 1 row affected (0.02 sec)

1. GRANT ALL ON test.* TO 'newuser';

1. Query OK, 0 rows affected (0.03 sec)

1. SHOW GRANTS FOR 'newuser';

1. +-------------------------------------------------+
2. | Grants for newuser@%                            |
3. +-------------------------------------------------+
4. | GRANT USAGE ON *.* TO 'newuser'@'%'             |
5. | GRANT ALL PRIVILEGES ON test.* TO 'newuser'@'%' |
6. +-------------------------------------------------+
7. 2 rows in set (0.00 sec)

1. REVOKE ALL ON test.* FROM 'newuser';

1. Query OK, 0 rows affected (0.03 sec)

1. SHOW GRANTS FOR 'newuser';

1. +-------------------------------------+
2. | Grants for newuser@%                |
3. +-------------------------------------+
4. | GRANT USAGE ON *.* TO 'newuser'@'%' |
5. +-------------------------------------+
6. 1 row in set (0.00 sec)

1. DROP USER 'newuser';

1. Query OK, 0 rows affected (0.14 sec)

1. SHOW GRANTS FOR 'newuser';

1. ERROR 1141 (42000): There is no such grant defined for user 'newuser' on host '%'

MySQL 兼容性

REVOKE <privileges> 语句执行成功后，在 TiDB 中语句执行的结果会在当前连接立即生效，而 MySQL 中部分权限的结果需要等到之后的连接才生效。见 TiDB #39356。

另请参阅