Revoking security labels

The REVOKE SECURITY LABEL statement revokes a security label from a user or from a list of users.

Before you begin

You must hold the DBSECADM role to issue the REVOKE SECURITY LABEL statement.

About this task

When you issue the statement, you optionally can also:
  • Revoke every security label of a security policy from users.
  • Specify read-access or write-access label, or both labels, if the users have two different labels for a security policy.

Procedure

Revoke a security label by issuing the REVOKE SECURITY LABEL statement, as described in HCL OneDB™ Guide to SQL: Syntax.

Example

In the following example of this SQL statement, label2 of the company security policy is revoked from user maria.

REVOKE SECURITY LABEL company.label2
   FROM maria;

What to do next