REVOKE <privileges>
此语句用于从现有用户中撤销权限。执行此语句需要拥有 GRANT OPTION 权限以及所有你要撤销的权限。
从 v8.5.6 开始，TiDB 支持与 MySQL 兼容的列级权限管理机制。你可以在 REVOKE 中指定列名列表，例如 REVOKE SELECT(col2) ON test.tbl FROM 'user'@'host';。更多信息，请参见列级权限管理。
概要
- RevokeStmt
- PrivElemList
- PrivElem
- PrivType
- ObjectType
- PrivLevel
- UserSpecList
示例
mysql> CREATE USER 'newuser' IDENTIFIED BY 'mypassword';
Query OK, 1 row affected (0.02 sec)
mysql> GRANT ALL ON test.* TO 'newuser';
Query OK, 0 rows affected (0.03 sec)
mysql> SHOW GRANTS FOR 'newuser';
+-------------------------------------------------+
| Grants for newuser@% |
+-------------------------------------------------+
| GRANT USAGE ON *.* TO 'newuser'@'%' |
| GRANT ALL PRIVILEGES ON test.* TO 'newuser'@'%' |
+-------------------------------------------------+
2 rows in set (0.00 sec)
mysql> REVOKE ALL ON test.* FROM 'newuser';
Query OK, 0 rows affected (0.03 sec)
mysql> SHOW GRANTS FOR 'newuser';
+-------------------------------------+
| Grants for newuser@% |
+-------------------------------------+
| GRANT USAGE ON *.* TO 'newuser'@'%' |
+-------------------------------------+
1 row in set (0.00 sec)
mysql> DROP USER 'newuser';
Query OK, 0 rows affected (0.14 sec)
mysql> SHOW GRANTS FOR 'newuser';
ERROR 1141 (42000): There is no such grant defined for user 'newuser' on host '%'MySQL 兼容性
- 在 TiDB 中，成功执行
REVOKE <privileges>语句后，执行结果会立即在当前连接生效。而 在 MySQL 中，对于某些权限，执行结果只在后续连接中生效。详情请参见 TiDB #39356。