Grant and Revoke

Data Control Language is one of the logical groups in SQL Commands. A DCL is a syntax identical to a programming language in a computer used to regulate information stored in a database. It is a part of Structured Query Language. This general language is used for relational database management systems. These statements can undergo tasks such as inserting information into a database, deleting or updating information in a database, or retrieving information from a database. You must have heard of these terms if you are working in the technology industry. Even if you are familiar with computers, you must not be aware of these terms. Grant and Revoke are famous Data Control Language commands used to allot users’ permissions to perform various tasks. The grant command permits the users, whereas the revoke command removes the authorisation. In this article, we will be learning more about the differences between Grant and Revoke. Before learning about the differences, we need to understand these DCL commands.

Grant

Grant is a command used to give specific users permission for various opportunities and rights on the database. This command can also allow users to grant permissions as well to all other users. For example, GRANT can give users privileges to do SELECT, DELETE, INSERT and UPDATE on a specific table or multiple tables.

The Syntax of Grant is:

grant privilege_name on object_name to {user_name | public | role_name} In the syntax, privilege_name is which access needs to be granted. On the other hand, the object_name is the object name present in the database. The user_name is the user to which that needs the permission, and the term public is present to allow and give access to any user.

Revoke

The revoke command removes permission from users and groups. This command serves as the opposite of the Grant command. The Revoke is executed to take back permission or revoke specific orders like UPDATE, INSERT, or DELETE based on needs.

The Syntax of Revoke is:

revoke privilege_name on object_name from {user_name | public | role_name} In the syntax, privilege_name is which access needs to be granted. On the other hand, the object_name is the object name present in the database. The user_name is the user to which that needs the permission, and the term public is present to allow and give access to any user.

Difference Between Revoke and Grant

There are many differences between these two commands. Some of the few differences between Grant and Revoke are :

• Grant permits the user on the database objects, whereas Revoke removes all privileges granted to the users on the database
• Grant gives access rights to the users. On the other hand, revoke removes the access rights of all users
• In Grant, the permissions have to be specified for each user, whereas in revoke, if the access is removed from one user, all the other users will face the same scenario
• Permission: It will be easy to grant permissions when the access is decentralised, whereas it will be different from removing the granted privileges when decentralised in revoke
• Execution: Grant can be executed efficiently, whereas revoke is pretty hard to operate

Conclusion

DCL is one of the subcategories of SQL. The two most important DCL commands are grant and revoke. The contrast between a grant and revoke is that a grant offers permission to the user, while revoke removes the right authorised by the user. Revoke functions precisely opposite to that of Grant. Both these commands are essential while running programs in the system.