======
REVOKE
======

Synopsis
--------

.. code-block:: none

    REVOKE [ GRANT OPTION FOR ]
    ( privilege [, ...] | ALL PRIVILEGES )
    ON [ TABLE ] table_name FROM ( grantee | PUBLIC )

Usage of the term ``grantee`` denotes both users and roles.

Description
-----------

Revokes the specified privileges from the specified grantee.

Specifying ``ALL PRIVILEGES`` revokes ``DELETE``, ``INSERT`` and ``SELECT`` privileges.

Specifying ``PUBLIC`` revokes privileges from all grantees.

The optional ``GRANT OPTION FOR`` clause also revokes the privileges to grant the specified privileges.

For ``REVOKE`` statement to succeed, the user executing it should possess the specified privileges as well as the ``GRANT OPTION`` for those privileges.

Limitation
----------

``REVOKE`` is currently supported only for hive connector.

Examples
--------

Revoke ``INSERT`` and ``SELECT`` privileges on the table ``orders`` from user ``alice``::

    REVOKE
    INSERT, SELECT
    ON orders FROM alice;

Revoke ``SELECT`` privilege on the table ``nation`` from everyone, additionally revoking the privilege to grant ``SELECT`` privilege::

    REVOKE GRANT OPTION FOR
    SELECT
    ON nation FROM PUBLIC;

REVOKE all privileges on the table ``test`` from user ``alice``::

    REVOKE
    ALL PRIVILEGES
    ON test FROM alice;