Skip to main content

RevokePermission

Revokes permission to access a database from a user in a cluster.

import {
  cloudApi,
  decodeMessage,
  serviceClients,
  Session,
  waitForOperation,
} from "@yandex-cloud/nodejs-sdk";

const RevokeUserPermissionRequest =
  cloudApi.mdb.clickhouse_user_service.RevokeUserPermissionRequest;
const User = cloudApi.datasphere.user.User;

(async () => {
  const authToken = process.env["YC_OAUTH_TOKEN"];
  const session = new Session({ oauthToken: authToken });
  const client = session.client(serviceClients.UserServiceClient);

  const operation = await client.revokePermission(
    RevokeUserPermissionRequest.fromPartial({
      clusterId: "clusterId",
      userName: "userName",
      // databaseName: "databaseName"
    })
  );
  const finishedOp = await waitForOperation(operation, session);

  if (finishedOp.response) {
    const result = decodeMessage<typeof User>(finishedOp.response);
    console.log(result);
  }
})();

RevokeUserPermissionRequest​

clusterId : string​

ID of the cluster to revoke permission from the user in.

To get this ID, make a ClusterService.List request.

userName : string​

Name of the user to revoke permission from.

To get this name, make a UserService.List request.

permission : Permission​

Permission that should be revoked from the user.

Permission​

Privilege​
  • PRIVILEGE_UNSPECIFIED

  • ALL_PRIVILEGES

    All privileges that can be made available to the user.

  • ALTER

    Altering tables.

  • ALTER_ROUTINE

    Altering stored routines and functions.

  • CREATE

    Creating tables or indexes.

  • CREATE_ROUTINE

    Creating stored routines.

  • CREATE_TEMPORARY_TABLES

    Creating temporary tables.

  • CREATE_VIEW

    Creating views.

  • DELETE

    Deleting tables.

  • DROP

    Removing tables or views.

  • EVENT

    Creating, altering, dropping, or displaying events for the Event Scheduler.

  • EXECUTE

    Executing stored routines.

  • INDEX

    Creating and removing indexes.

  • INSERT

    Inserting rows into the database.

  • LOCK_TABLES

    Using LOCK TABLES statement for tables available with SELECT privilege.

  • SELECT

    Selecting rows from tables. Some SELECT statements can be allowed without the SELECT privilege. All statements that read column values require the SELECT privilege. See MySQL documentation for details.

  • SHOW_VIEW

    Using the SHOW CREATE VIEW statement. Also needed for views used with EXPLAIN.

  • TRIGGER

    Creating, removing, executing, or displaying triggers for a table.

  • UPDATE

    Updating rows in the database.

  • REFERENCES

    Creation of a foreign key constraint for the parent table.

databaseName : string​

Name of the database that the permission grants access to.

roles : Privilege​

Roles granted to the user within the database.

See the documentation for details.

Operation​

An Operation resource. For more information, see Operation.

id : string​

ID of the operation.

description : string​

Description of the operation. 0-256 characters long.

createdAt : google.protobuf.Timestamp​

Creation timestamp.

createdBy : string​

ID of the user or service account who initiated the operation.

modifiedAt : google.protobuf.Timestamp​

The time when the Operation resource was last modified.

done : bool​

If the value is false, it means the operation is still in progress. If true, the operation is completed, and either error or response is available.

metadata : google.protobuf.Any​

Service-specific metadata associated with the operation. It typically contains the ID of the target resource that the operation is performed on. Any method that returns a long-running operation should document the metadata type, if any.

One of result​

The operation result. If done == false and there was no failure detected, neither error nor response is set. If done == false and there was a failure detected, error is set. If done == true, exactly one of error or response is set.

  • error : google.rpc.Status​

    The error result of the operation in case of failure or cancellation.

  • response : google.protobuf.Any​
    The normal response of the operation in case of success.

    If the original method returns no data on success, such as Delete, the response is google.protobuf.Empty. If the original method is the standard Create/Update, the response should be the target resource of the operation. Any method that returns a long-running operation should document the response type, if any.