On this page本页内容
db.revokeRolesFromRole(rolename, roles, writeConcern)
Removes the specified inherited roles from a role.从角色中删除指定的继承角色。
The db.revokeRolesFromRole() method uses the following syntax:db.revokeRolesFromRole()方法使用以下语法:
db.revokeRolesFromRole( "<rolename>", [ <roles> ], { <writeConcern> } )
The db.revokeRolesFromRole() method takes the following arguments:db.revokeRolesFromRole()方法采用以下参数:
rolename | string | |
roles | array | |
writeConcern | document |
|
In the 在roles field, you can specify both built-in roles and user-defined roles.roles字段中,可以指定内置角色和用户定义的角色。
To specify a role that exists in the same database where 要指定存在于运行db.revokeRolesFromRole() runs, you can either specify the role with the name of the role:db.revokeRolesFromRole()的同一数据库中的角色,可以使用角色名称指定角色:
"readWrite"
Or you can specify the role with a document, as in:也可以使用文档指定角色,如:
{ role: "<role>", db: "<database>" }
To specify a role that exists in a different database, specify the role with a document.要指定存在于其他数据库中的角色,请使用文档指定该角色。
The db.revokeRolesFromRole() method wraps the revokeRolesFromRole command.db.revokeRolesFromRole()方法包装了revokeRolesFromRole命令。
If run on a replica set, 如果在副本集上运行,默认情况下,db.revokeRolesFromRole() is executed using "majority" write concern by default.db.revokeRolesFromRole()将使用"majority"写入关注点执行。
You must have the 必须对数据库执行revokeRole action on a database to revoke a role on that database.revokeRole操作才能撤销该数据库上的角色。
The purchaseAgents role in the emea database inherits privileges from several other roles, as listed in the roles array:emea数据库中的purchaseAgents角色继承了其他几个角色的权限,如roles数组中所列:
{
"_id" : "emea.purchaseAgents",
"role" : "purchaseAgents",
"db" : "emea",
"privileges" : [],
"roles" : [
{
"role" : "readOrdersCollection",
"db" : "emea"
},
{
"role" : "readAccountsCollection",
"db" : "emea"
},
{
"role" : "writeOrdersCollection",
"db" : "emea"
}
]
}
The following db.revokeRolesFromRole() operation on the emea database removes two roles from the purchaseAgents role:emea数据库上的以下db.revokeRolesFromRole()操作从purchaseAgents角色中删除了两个角色:
use emea db.revokeRolesFromRole( "purchaseAgents", [ "writeOrdersCollection", "readOrdersCollection" ], { w: "majority" , wtimeout: 5000 } )
The purchaseAgents role now contains just one role:purchaseAgents角色现在只包含一个角色:
{
"_id" : "emea.purchaseAgents",
"role" : "purchaseAgents",
"db" : "emea",
"privileges" : [],
"roles" : [
{
"role" : "readAccountsCollection",
"db" : "emea"
}
]
}