Database Reference
In-Depth Information
PRINCE originally granted the CREATE VIEW privilege to ARIEL.
Revoked system privileges do not cause cascading revokes; only object priv-
ilege revokes can do that.
CREATE VIEW CA_ARTISTS AS
SELECT * FROM MUSIC.ARTIST WHERE STATE_PROVINCE='CA';
We will now examine some rules about revoking privileges. Using
graphic examples, here are some key points to remember about how revok-
ing of privileges works.
23.2.2.1
Revoked System Privileges DO NOT Cascade
When you revoke a system privilege, the revoke affects only the user you are
naming and does not affect any objects or users created. For example, SYS-
TEM grants the CREATE USER privilege WITH ADMIN OPTION to
ASSISTANT. Then ASSISTANT creates a user named INTERN and
grants her the CREATE USER privilege. Now, INTERN creates another
user named JOE. Figure 23.10 illustrates these events.
Figure 23.10
One New User Is
Created by Each of
These Users:
SYSTEM,
ASSISTANT, and
INTERN.
