REVOKE Area Access Privileges

Revokes from one or more users or groups access to an area.
idms19
Revokes from one or more users or groups access to an area.
Authorization
To revoke an area access privilege, you must hold one of these privileges:
  • The grantable area access privilege on the area
  • DBADMIN on DB
    segment-name
  • SYSADMIN
You must be connected to the system dictionary when you issue the statement.
Syntax
              ┌────── , ───────┐ ►►─── REVOKE ─▼─┬─ DBAREAD ──┬─┴──────────────────────────────────────────────►                 ├─ DBAWRITE ─┤                 └─ USE ──────┘    ►─── ON AREA 
segment-name
.
area-name
 ─────────────────────────────────────────►               ┌─────────────── , ──────────────┐  ►─── FROM ─▼─┬─ PUBLIC ───────────────────┬─┴────────────────────────────────►◄               └─ 
authorization-identifier
 ─┘
Parameters
 
  • DBAREAD
    Specifies that you are revoking DBAREAD privilege on the area named in the ON parameter from the users or groups named in the FROM parameter.
  • DBAWRITE
    Specifies that you are revoking DBAWRITE privilege on the area named in the ON parameter from the users or groups named in the FROM parameter.
  • USE
    Specifies that you are revoking USE privilege on the area named in the ON parameter from the users or groups named in the FROM parameter.
  • ON AREA
    segment-name
    .
    area-name
    Identifies the area to which the specified area access privileges apply.
    You can wildcard
    area-name
    when you revoke area access privileges. You cannot wildcard
    segment-name
    . The wildcard character is valid after the period following
    segment-name
    .
    For more information on wildcarding, see Using a Wildcard.
  • FROM
    Specifies the users or groups from whom you are revoking area access privileges.
  • PUBLIC
    Specifies all users.
    The privileges must have been previously given to PUBLIC by means of the GRANT statement.
  • authorization-identifier
    Identifies a user or group.
    The privileges must have been previously given to
    authorization-identifier
    by means of the GRANT statement.
    Expanded syntax for
    authorization-identifier
    is presented in Notes on Security Statement Syntax.
Revoking Area Access Privileges
The following statement revokes an area access privilege from the specified user:
revoke dbawrite   on area gl."account-area"   from alex;
For more information on granting the privilege to access an area, see GRANT Area Access Privileges.