数据控制语言的语法语句

数据控制语言的语法语句

GRANT语句是授权语句，它可以把语句权限或者对象权限授予给其他用户和角色。
授予语句权限的语法形式为：
GRANT {ALL | statement[,...n]} TO security_account [ ,...n ]
授予对象权限的语法形式为：
GRANT{ ALL [ PRIVILEGES ] | permission [ ,...n ] }{[ ( column [ ,...n ] ) ]ON { table | view }| ON { table | view } [ ( column [ ,...n ] ) ]| ON {stored_procedure | extended_procedure }| ON { user_defined_function } }TO security_account [ ,...n ] [ WITH GRANT OPTION ] [ AS { group | role} ] DENY语句用于拒绝给当前数据库内的用户或者角色授予权限，并防止用户或角色通过其组或角色成员继承权限。否定语句权限的语法形式为：
DENY { ALL | statement [ ,...n ] } TO security_account [ ,...n ]
否定对象权限的语法形式为：
DENY{ ALL [ PRIVILEGES ] | permission [ ,...n ] } { [ ( column [ ,...n ] )] ON { table | view } | ON { table | view } [ ( column [ ,...n ] ) ] |ON { stored_procedure | extended_procedure } | ON {user_defined_function } } TO security_account [ ,...n ] [ CASCADE ] REVOKE语句是与GRANT语句相反的语句，它能够将以前在当前数据库内的用户或者角色上授予或拒绝的权限删除，但是该语句并不影响用户或者角色从其他角色中作为成员继承过来的权限。
收回语句权限的语法形式为：
REVOKE { ALL | statement [ ,...n ] } FROM security_account [ ,...n ]
收回对象权限的语法形式为：
REVOKE[ GRANT OPTION FOR ] { ALL [ PRIVILEGES ] | permission [ ,...n ] } { [( column [ ,...n ] ) ] ON { table | view } | ON { table | view } [ (column [ ,...n ] ) ] | ON { stored_procedure | extended_procedure } |ON { user_defined_function } } { TO | FROM } security_account [ ,...n ][ CASCADE ] [ AS { group | role } ]