17.05 - Revoking the CTCONTROL Privilege - Teradata Database

Teradata Vantageā„¢ - SQL Data Control Language

prodname
Advanced SQL Engine
Teradata Database
vrm_release
17.00
17.05
created_date
June 2020
category
Programming Reference
featnum
B035-1149-170K

If you specify the GRANT OPTION FOR option with a REVOKE request on the CTCONTROL privilege, the specification removes only the ability of the recipient to grant the privilege to others. The CTCONTROL privilege itself is not revoked when you specify GRANT OPTION FOR. Instead, you must submit a REVOKE request on the user that does not specify GRANT OPTION FOR.

The following example revokes from user kate the privilege to grant the CONNECT THROUGH privilege to any Teradata Database user:

REVOKE CTCONTROL FROM kate;

Note that this request revokes the CTCONTROL privilege from kate, not just her ability to grant CTCONTROL to other users, which would be the outcome of the following similar appearing request:

REVOKE GRANT OPTION FOR CTCONTROL FROM kate;