revokeRolesFromRole

Definition定义

revokeRolesFromRole

Removes the specified inherited roles from a role. 从角色中删除指定的继承角色。The revokeRolesFromRole command has the following syntax:revokeRolesFromRole命令具有以下语法：

{ revokeRolesFromRole: "<role>",
  roles: [
    { role: "<role>", db: "<database>" } | "<role>",
    ...
  ],
  writeConcern: { <write concern> },
  comment: <any>
}

The command has the following fields:该命令包含以下字段：

Field字段	Type类型	Description描述
revokeRolesFromRole	string	The role from which to remove inherited roles.要从中删除继承角色的角色。
roles	array	The inherited roles to remove.要删除的继承角色。
writeConcern	document	Optional. 可选。The level of write concern for the operation. 操作的写入关注级别。See Write Concern Specification.请参阅写入关注规范。
comment	any	Optional. 可选。A user-provided comment to attach to this command. Once set, this comment appears alongside records of this command in the following locations:用户提供了附加到此命令的注释。设置后，此注释将与此命令的记录一起显示在以下位置： mongod log messages, in the attr.command.cursor.comment field.mongod日志消息，在attr.command.cursor.comment字段中。 Database profiler output, in the command.comment field.数据库探查器输出，在command.comment字段中。 currentOp output, in the command.comment field.currentOp输出，在command.comment字段中。 A comment can be any valid BSON type(string, integer, object, array, etc).注释可以是任何有效的BSON类型（字符串、整数、对象、数组等）。 New in version 4.4.在版本4.4中新增。

In the roles field, you can specify both built-in roles and user-defined roles.在roles字段中，可以指定内置角色和用户定义角色。

To specify a role that exists in the same database where revokeRolesFromRole runs, you can either specify the role with the name of the role:要指定运行revokeRolesFromRole的同一数据库中存在的角色，可以使用角色名称指定角色：

"readWrite"

Or you can specify the role with a document, as in:也可以使用文档指定角色，如：

{ role: "<role>", db: "<database>" }

To specify a role that exists in a different database, specify the role with a document.若要指定存在于其他数据库中的角色，请使用文档指定该角色。

Example示例

The purchaseAgents role in the emea database inherits privileges from several other roles, as listed in the roles array:emea数据库中的purchaseAgents角色继承了其他几个角色的权限，如roles数组中所列：

{
   "_id" : "emea.purchaseAgents",
   "role" : "purchaseAgents",
   "db" : "emea",
   "privileges" : [],
   "roles" : [
      {
         "role" : "readOrdersCollection",
         "db" : "emea"
      },
      {
         "role" : "readAccountsCollection",
         "db" : "emea"
      },
      {
         "role" : "writeOrdersCollection",
         "db" : "emea"
      }
   ]
}

The following revokeRolesFromRole operation on the emea database removes two roles from the purchaseAgents role:emea数据库上的以下revokeRolesFromRole操作将从purchaseAgents角色中删除两个角色：

use emea
db.runCommand( { revokeRolesFromRole: "purchaseAgents",
                 roles: [
                          "writeOrdersCollection",
                          "readOrdersCollection"
                        ],
                  writeConcern: { w: "majority" , wtimeout: 5000 }
             } )

The purchaseAgents role now contains just one role:purchaseAgents角色现在只包含一个角色：

{
   "_id" : "emea.purchaseAgents",
   "role" : "purchaseAgents",
   "db" : "emea",
   "privileges" : [],
   "roles" : [
      {
         "role" : "readAccountsCollection",
         "db" : "emea"
      }
   ]
}