Authorisation

Manage access with GRANT and REVOKE.

Authorization

Authorization sets which user can run which action on which table. GRANT grants a privilege, REVOKE takes it back. Roles group privileges together.

GRANT SELECT, INSERT ON orders
TO reader;
REVOKE INSERT ON orders FROM reader;

GRANT grants, REVOKE takes back.

The expression , INSERT ON orders TO reader is evaluated and returned.

Authorization — details

The least privilege principle: give a user only the privilege their job needs. SELECT for readers, INSERT/UPDATE for writers, ALL for admins. This shrinks the attack surface.

Exercise Authorization

Give the reader role read access on orders: GRANT SELECT ON orders TO reader.

Show example solution

GRANT SELECT ON orders TO reader;

Test yourself

Authorisation: match the terms

GRANT

grant
REVOKE

revoke
role

role
SELECT

read

Grant permission

GRANT SELECT ON orders TO ____

Show answer

GRANT SELECT ON orders TO reader

What does GRANT SELECT give?
- All permissions
- Delete permission
- Write permission
- Read permission
Show answer

Read permission — GRANT SELECT gives read permission.

Next lesson: Backup

We Are Enhancing Your Experience

Cookie Preferences

Strictly Necessary Cookies

Analytical Cookies