sql / intermediate
Snippet
Restricting User Permissions via REVOKE Statements
The REVOKE statement removes previously assigned privileges from user roles or public access groups. Using RESTRICT prevents revoking privileges if dependent objects exist, whereas CASCADE automatically removes dependent privileges granted transitively.
snippet.sql
sql
1
2
REVOKE UPDATE, DELETE ON TABLE audit_logs FROM analyst_role RESTRICT;REVOKE SELECT ON TABLE salary_records FROM PUBLIC CASCADE;
Breakdown
1
REVOKE UPDATE, DELETE ON TABLE audit_logs FROM analyst_role RESTRICT;
Removes data modification permissions on audit logs for analyst roles, failing if dependencies exist.
2
REVOKE SELECT ON TABLE salary_records FROM PUBLIC CASCADE;
Strips read access to sensitive salary records from all users while removing any transitively granted permissions.