db.revokeRolesFromRole()¶

Definition定义¶

db.revokeRolesFromRole(rolename, roles, writeConcern)¶

Removes the specified inherited roles from a role.从角色中删除指定的继承角色。

The revokeRolesFromRole method uses the following syntax:revokeRolesFromRole方法使用以下语法：

db.revokeRolesFromRole( "<rolename>", [ <roles> ], { <writeConcern> } )

The revokeRolesFromRole method takes the following arguments:revokeRolesFromRole方法采用以下参数：

Parameter参数	Type类型	Description描述
rolename	string	The name of the role from which to revoke roles.要从中撤消角色的角色的名称。
roles	array	The inherited roles to remove.要删除的继承角色。
writeConcern	document	Optional.可选。The level of write concern to apply to this operation. 要应用于此操作的写入关注级别。The writeConcern document uses the same fields as the getLastError command.writeConcern文档使用与getLastError命令相同的字段。

In the roles field, you can specify both built-in roles and user-defined roles.在roles字段中，可以指定内置角色和用户定义角色。

To specify a role that exists in the same database where db.revokeRolesFromRole() runs, you can either specify the role with the name of the role:要指定运行db.revokeRolesFromRole()的同一数据库中存在的角色，可以使用该角色的名称指定该角色：

"readWrite"

Or you can specify the role with a document, as in:也可以通过文档指定角色，如中所示：

{ role: "<role>", db: "<database>" }

To specify a role that exists in a different database, specify the role with a document.要指定存在于其他数据库中的角色，请使用文档指定该角色。

The db.revokeRolesFromRole() method wraps the revokeRolesFromRole command.db.revokeRolesFromRole()方法包装revokeRolesFromRole命令。

Behavior行为¶

Required Access所需访问权限¶

You must have the revokeRole action on a database to revoke a role on that database.必须对数据库执行revokeRole操作才能撤销该数据库上的角色。

Example示例¶

The purchaseAgents role in the emea database inherits privileges from several other roles, as listed in the roles array:emea数据库中的purchaseAgents角色从其他几个角色继承权限，如角色数组中所列：

{
   "_id" : "emea.purchaseAgents",
   "role" : "purchaseAgents",
   "db" : "emea",
   "privileges" : [],
   "roles" : [
      {
         "role" : "readOrdersCollection",
         "db" : "emea"
      },
      {
         "role" : "readAccountsCollection",
         "db" : "emea"
      },
      {
         "role" : "writeOrdersCollection",
         "db" : "emea"
      }
   ]
}

The following db.revokeRolesFromRole() operation on the emea database removes two roles from the purchaseAgents role:emea数据库上的以下db.revokeRolesFromRole()操作将从purchaseAgents角色中删除两个角色：

use emea
db.revokeRolesFromRole( "purchaseAgents",
                        [
                          "writeOrdersCollection",
                          "readOrdersCollection"
                        ],
                        { w: "majority" , wtimeout: 5000 }
                      )

The purchaseAgents role now contains just one role:purchaseAgents角色现在只包含一个角色：

{
   "_id" : "emea.purchaseAgents",
   "role" : "purchaseAgents",
   "db" : "emea",
   "privileges" : [],
   "roles" : [
      {
         "role" : "readAccountsCollection",
         "db" : "emea"
      }
   ]
}