REVOKE LOGON Statement | SQL Data Control Language | Teradata Vantage - 17.05 - REVOKE LOGON - Teradata Database

Teradata Vantageā„¢ - SQL Data Control Language

prodname
Advanced SQL Engine
Teradata Database
vrm_release
17.00
17.05
created_date
June 2020
category
Programming Reference
featnum
B035-1149-170K
Does either of the following:
  • Revokes permission to log on to the database from one or more specific client systems.
  • Changes the current system logon defaults.

See GRANT LOGON for information about granting logon privileges.

Required Privileges

You must have the EXECUTE privilege on the DBC.LogonRule macro to perform REVOKE LOGON.

No checks are made on whether the database names or user names defined in the statement apply to users owned by the requesting user.

If the system cannot verify the submitted statement because it specifies a nonvalid user name or a nonvalid host ID, then an error is returned.

Syntax

REVOKE LOGON ON
  { host_id [,...] | ALL }
  { AS DEFAULT |
    { TO | FROM } user_name [,...]
  } [;]

Syntax Elements

host_id
An integer that identifies a mainframe connection or a workstation connection that is currently defined to the system by the hardware configuration data. The interface need not be operational.
The value for the database console is 0.
For any other connector, the value for host_id ranges from 1 through 32,767.
ALL
Any source through which a logon is attempted, including the database console.
AS DEFAULT
Indicates that the current default for the specified host ID set is to be changed, without residual conditions, as defined in this REVOKE LOGON request.
A request with AS DEFAULT has no effect on the access revoked from or granted to particular user names. A request that sets the default for a specific host ID takes precedence over a request that sets the default for ALL client systems.
TO
FROM
Keywords introduced to override the current default for the specified database_name_list or user_name set on the specified host_ID set.
user_name
One or more user names from whom logons are to be revoked.
The name DBC cannot be specified as a user_name in a REVOKE LOGON request. Any request that specifies the name DBC as a user aborts and returns an error message to the requestor.
The product of the number of host IDs and the number of database and user names cannot exceed 25.