Recursive Revoke

Synonyms

Cascade revoke

Related Concepts

Grant Option; SQL Access Control Model

Definition

Recursive revocation demands that, when an administrative authorization is revoked, all the authorizations dependent on the revoked authorization be also revoked, iteratively applying the process for each authorization being revoked.

Theory

When administrative privileges can be delegated, if an administrative authorization is revoked, the problem arises of dealing with the authorizations specified by the users from whom the administrative privilege is being revoked. For instance, suppose that Alice gives Bob the authorization to read relation Employee with the grant optionprivilege, meaning that Bob can give this authorization to others. Suppose then that Bob grants the authorization to Carol, and that subsequently Alice revokes the authorization from Bob. The question now is: what should happen to the authorization that Carol has received? If Carol’s authorization depended on the authorization...