Role base permission management can make permission management and permission management delegation a lot simpler. Read on to see how roles can be used to make grantable grants obsolete.
What the DENY CASCADE statement does seems obvious. But is it? Read on to see what DENY CASCADE actually does and if that matches your expectation.
REVOKE together with the CASCADE keyword removes a permission and also all child permissions that were granted based on it. Read on to see how this plays out if the permission in question is the CONTROL privilege.
Does the CASCADE keyword on the REVOKE statement imply that you can build an entire hierarchy of grantable grants using GRANT … WITH GRANT OPTION? What does that mean for your permission management plan? Find out now.
To remove just the grant option from a permission that has been granted specifying WITH GRANT OPTION , the REVOKE GRANT OPTION statement can be used. Read on to get all the details.