FirebirdSQL logo
 Statements for Granting PrivilegesMapping of Users to Objects 

The DEFAULT Clause

When the DEFAULT clause is specified, the role itself is not revoked, only its DEFAULT property is removed without revoking the role itself.

The FROM Clause

The FROM clause specifies a list of users, roles and other database objects that will have the enumerated privileges revoked.The optional USER keyword in the FROM clause allow you to specify exactly which type is to have the privilege revoked.If a USER (or ROLE) keyword is not specified, the server first checks for a role with this name and, if there is no such role, the privileges are revoked from the user with that name without further checking.

Tip

  • Although the USER keyword is optional, it is advisable to use them to avoid ambiguity with roles.

  • The REVOKE statement does not check for the existence of the user from which the privileges are being revoked.

  • When revoking a privilege from a database object other than USER or ROLE, you must specify its object type
Important
Revoking Privileges from user PUBLIC

Privileges that were granted to the special user named PUBLIC must be revoked from the user PUBLIC.User PUBLIC provides a way to grant privileges to all users at once, but it is not “a group of users”.