title: REVOKE summary: TiDB 数据库中 REVOKE 的使用概况。

REVOKE <privileges>

REVOKE <privileges> 语句用于删除已有用户的权限。执行 REVOKE <privileges> 语句需要拥有分配的权限，并且拥有 GRANT OPTION 权限。

语法图

  1. GrantStmt ::=
  2.     'GRANT' PrivElemList 'ON' ObjectType PrivLevel 'TO' UserSpecList RequireClauseOpt WithGrantOptionOpt
  4. PrivElemList ::=
  5.     PrivElem ( ',' PrivElem )*
  7. PrivElem ::=
  8.     PrivType ( '(' ColumnNameList ')' )?
  10. PrivType ::=
  11.     'ALL' 'PRIVILEGES'?
  12. |   'ALTER' 'ROUTINE'?
  13. |   'CREATE' ( 'USER' | 'TEMPORARY' 'TABLES' | 'VIEW' | 'ROLE' | 'ROUTINE' )?
  14. |    'TRIGGER'
  15. |   'DELETE'
  16. |    'DROP' 'ROLE'?
  17. |    'PROCESS'
  18. |    'EXECUTE'
  19. |   'INDEX'
  20. |   'INSERT'
  21. |   'SELECT'
  22. |   'SUPER'
  23. |    'SHOW' ( 'DATABASES' | 'VIEW' )
  24. |   'UPDATE'
  25. |   'GRANT' 'OPTION'
  26. |   'REFERENCES'
  27. |   'REPLICATION' ( 'SLAVE' | 'CLIENT' )
  28. |   'USAGE'
  29. |    'RELOAD'
  30. |   'FILE'
  31. |   'CONFIG'
  32. |   'LOCK' 'TABLES'
  33. |    'EVENT'
  34. |   'SHUTDOWN'
  36. ObjectType ::=
  37.     'TABLE'?
  39. PrivLevel ::=
  40.     '*' ( '.' '*' )?
  41. |    Identifier ( '.' ( '*' | Identifier ) )?
  43. UserSpecList ::=
  44.     UserSpec ( ',' UserSpec )*

示例

  1. CREATE USER 'newuser' IDENTIFIED BY 'mypassword';
  1. Query OK, 1 row affected (0.02 sec)
  1. GRANT ALL ON test.* TO 'newuser';
  1. Query OK, 0 rows affected (0.03 sec)
  1. SHOW GRANTS FOR 'newuser';
  1. +-------------------------------------------------+
  2. | Grants for newuser@%                            |
  3. +-------------------------------------------------+
  4. | GRANT USAGE ON *.* TO 'newuser'@'%'             |
  5. | GRANT ALL PRIVILEGES ON test.* TO 'newuser'@'%' |
  6. +-------------------------------------------------+
  7. 2 rows in set (0.00 sec)
  1. REVOKE ALL ON test.* FROM 'newuser';
  1. Query OK, 0 rows affected (0.03 sec)
  1. SHOW GRANTS FOR 'newuser';
  1. +-------------------------------------+
  2. | Grants for newuser@%                |
  3. +-------------------------------------+
  4. | GRANT USAGE ON *.* TO 'newuser'@'%' |
  5. +-------------------------------------+
  6. 1 row in set (0.00 sec)
  1. DROP USER 'newuser';
  1. Query OK, 0 rows affected (0.14 sec)
  1. SHOW GRANTS FOR 'newuser';
  1. ERROR 1141 (42000): There is no such grant defined for user 'newuser' on host '%'

MySQL 兼容性

REVOKE <privileges> 语句与 MySQL 完全兼容。如发现任何兼容性差异，请在 GitHub 上提交 issue。

另请参阅