If you specify the GRANT OPTION FOR option with a REVOKE request on the CTCONTROL privilege, the specification removes only the ability of the recipient to grant the privilege to others. The CTCONTROL privilege itself is not revoked when you specify GRANT OPTION FOR. Instead, you must submit a REVOKE request on the user that does not specify GRANT OPTION FOR.
The following example revokes from user kate the privilege to grant the CONNECT THROUGH privilege to any Vantage user:
REVOKE CTCONTROL FROM kate;
This request revokes the CTCONTROL privilege from kate, not only her ability to grant CTCONTROL to other users, which as in the following request:
REVOKE GRANT OPTION FOR CTCONTROL FROM kate;