If you specify the GRANT OPTION FOR option with a REVOKE request on the CTCONTROL privilege, the specification removes only the ability of the recipient to grant the privilege to others. The CTCONTROL privilege itself is not revoked when you specify GRANT OPTION FOR. Instead, you must submit a REVOKE request on the user that does not specify GRANT OPTION FOR.
The following example revokes from user kate the privilege to grant the CONNECT THROUGH privilege to any Vantage user:
REVOKE CTCONTROL FROM kate;
The following example revokes from kate both the CTCONTROL privilege and her ability to grant CTCONTROL to other users:
REVOKE GRANT OPTION FOR CTCONTROL FROM kate;