FirebirdSQL logo
 Statements for Granting PrivilegesMapping of Users to Objects 

The FROM Clause

The FROM clause specifies a list of users, roles and other database objects that will have the enumerated privileges revoked.The optional USER keyword in the FROM clause allow you to specify exactly which type is to have the privilege revoked.If a USER (or ROLE) keyword is not specified, the server first checks for a role with this name and, if there is no such role, the privileges are revoked from the user with that name without further checking.

Tip

  • Although the USER keyword is optional, it is advisable to use them to avoid ambiguity with roles.

  • The REVOKE statement does not check for the existence of the user from which the privileges are being revoked.

  • When revoking a privilege from a database object other than USER or ROLE, you must specify its object type
Important
Revoking Privileges from user PUBLIC

Privileges that were granted to the special user named PUBLIC must be revoked from the user PUBLIC.User PUBLIC provides a way to grant privileges to all users at once, but it is not “a group of users”.

Revoking the GRANT OPTION

The optional GRANT OPTION FOR clause revokes the user’s privilege to grant the specified privileges to other users, roles, or database objects (as previously granted with the WITH GRANT OPTION).It does not revoke the specified privilege itself.