Revoking privileges in MySQL - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does the REVOKE command do in MySQL?

The REVOKE command removes specific privileges from a user, stopping them from performing certain actions on the database.

beginner

Syntax of REVOKE command to remove SELECT privilege on a database from a user.

REVOKE SELECT ON database_name.* FROM 'username'@'host';

intermediate

Can you revoke multiple privileges at once in MySQL? How?

Yes, you can revoke multiple privileges by listing them separated by commas, for example: REVOKE SELECT, INSERT ON db.* FROM 'user'@'host';

beginner

What happens if you revoke all privileges from a user?

The user loses all the specified permissions and cannot perform any actions on the database objects for which privileges were revoked.

intermediate

Why is it important to revoke privileges carefully?

Revoking privileges carefully ensures users only have access they need, improving security and preventing accidental or malicious data changes.

Which command removes privileges from a MySQL user?

A REVOKE

B GRANT

C DELETE

D DROP

REVOKE is used to remove privileges; GRANT is used to give privileges.

How do you revoke the INSERT privilege on all tables in a database named 'shop' from user 'alice'?

A GRANT INSERT ON shop.* TO 'alice'@'localhost';

B REVOKE INSERT ON shop.* FROM 'alice'@'localhost';

C REVOKE INSERT ON shop FROM 'alice';

D DROP USER 'alice'@'localhost';

Option B correctly revokes INSERT privilege on all tables in 'shop' from user 'alice'.

Can you revoke privileges from a user that does not have them?

A Yes, it will silently succeed.

B No, it causes an error.

C Yes, but only for SELECT privilege.

D No, you must grant first.

Revoking privileges the user does not have does not cause an error; it just has no effect.

Which of these is NOT a valid privilege to revoke?

A UPDATE

B INSERT

C CREATE USER

D SELECT

CREATE USER is an administrative privilege, not revoked with REVOKE on database objects.

What is the effect of revoking ALL PRIVILEGES from a user?

A User is deleted.

B User can still read data.

C User can still write data.

D User loses all database permissions.

Revoking ALL PRIVILEGES removes all permissions, so the user cannot read or write data.

Explain how to revoke the SELECT and UPDATE privileges from a user on a specific database in MySQL.

Think about how to list privileges separated by commas and specify the user with host.

Why is it important to manage user privileges carefully using REVOKE in a database system?

Consider what could happen if users have more access than needed.