15.00 - REVOKE - Teradata Database

Teradata Database Utilities

Product
Teradata Database
Release Number
15.00
Content Type
Configuration
Publication ID
B035-1102-015K
Language
English (United States)
Last Update
2018-09-25

REVOKE

Purpose  

Revokes CNS permissions from a user who is not a member of the tdtrusted user group. Members of tdtrusted implicitly have a non-revocable CNS permissions.

Syntax  

 

Syntax element …

Is the …

username

logon name of the user accessing CNS for whom you want to revoke permissions.

host

network host name of the computer on which that user is logged on.

permission_list

list of supervisor privileges to be revoked, separated by spaces.

  • abort: Revokes the user authority to issue the ABORT SESSION command.
  • all: Revokes the user authority to issue all CNS commands.
  • grant: Revokes the user authority to issue the GRANT and REVOKE commands.
  • interactive: Revokes the user authority to issue input to interactive programs.
  • Note: Enclose the program or program list, separated by spaces, in parentheses. For example:

    (ctl dbscontrol vprocmanager)

  • logons: Revokes the user authority to issue:
  • ENABLE LOGONS/ENABLE ALL LOGONS
  • ENABLE DBC LOGONS
  • DISABLE LOGONS/DISABLE ALL LOGONS
  • log: Revokes the user authority to issue the LOG command.
  • restart: Revokes the user authority to issue the RESTART command.
  • set: Revokes the user authority to issue CNSSET and SET commands.
  • start: Revokes the user authority to issue the START and STOP commands.
  • Usage Notes  

    The REVOKE command only affects future DBW sessions. You must stop the DBW session and then restart it for the updated permissions to take effect.

    If interactive permission is revoked, then it is removed from the GRANT list if it exists there. If interactive permission has been granted, it is added to the GRANT list. To grant interactive permissions, see “GRANT” on page 183.

    Example  

    In this example, the following CNS permissions: START, STOP, and LOGONS, and interactive utilities: System Initializer (SYSINIT) and Filer, are revoked from connection-ID jsmith@isdn1954.

    revoke jsmith@isdn1954 start logons interactive (sysinit filer)
     
    CNSSUPV: permissions for jsmith@isdn1954 updated
    jsmith@isdn1954: set log restart abort interactive
                     Revoked Utilities: sysinit filer