Sorry I didn't describe my question clearly. Say that role r1 is granted to many users, and I want to disable role r1 so that privileges granted to these users are disabled at the same time. I don't want to call REVOKE for each user, and it can prevent situations when I forget to call REVOKE for some users.
On 06/11/2018 03:24 AM, Yinjie Lin wrote:
Hello everyone.
I'm wondering if there is any way we could disable a role temporarily, and enable it later.
For example, there are two users u1 and u2. User u1 grants the privileges of its table t1 to role r1:
grant all on t1 to r1;
Then, role r1 is granted to user u2:
grant r1 to u2;
Now user u2 should have access to table t1. Here is my question: can we disable role r1 so that user u2 will not have permissions on table t1? Note that role r1 is not removed, so we can enable it later.
I expected ALTER ROLE would have some options dealing with this, but could not find a proper way. Does anyone have ideas? Thanks in advance.
Why not revoke r1 from u2?
--
Angular momentum makes the world go 'round.