Skip to content

Commit 7f9e214

Browse files
authored
Fix deny/revoke database query (#1427)
1 parent 2b42958 commit 7f9e214

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

pages/database-management/authentication-and-authorization/multiple-roles.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -48,10 +48,10 @@ permissions:
4848
GRANT DATABASE db_name TO user_or_role;
4949
5050
-- Deny database access
51-
DENY DATABASE db_name TO user_or_role;
51+
DENY DATABASE db_name FROM user_or_role;
5252
5353
-- Revoke database access
54-
REVOKE DATABASE db_name TO user_or_role;
54+
REVOKE DATABASE db_name FROM user_or_role;
5555
```
5656

5757
### How database access works
@@ -94,7 +94,7 @@ When roles have conflicting database access, deny takes precedence:
9494
GRANT DATABASE db1 TO role1;
9595
9696
-- Role2 denies access to db1
97-
DENY DATABASE db1 TO role2;
97+
DENY DATABASE db1 FROM role2;
9898
9999
-- User with both roles
100100
SET ROLE FOR user TO role1, role2;

pages/database-management/multi-tenancy.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -254,7 +254,7 @@ User-role mappings are simple maps located in the user. Deleting or renaming the
254254
</Callout>
255255

256256
Access to all databases can be granted or revoked using wildcards:
257-
`GRANT DATABASE * TO user;`, `DENY DATABASE * TO user;` or
257+
`GRANT DATABASE * TO user;`, `DENY DATABASE * FROM user;` or
258258
`REVOKE DATABASE * FROM user;`.
259259

260260
### Multi-database queries and the memgraph database

0 commit comments

Comments
 (0)