Consider the following sequence of events:
Eddie grants SELECT WITH GRANT OPTION privilege to Mike.
Mike grants SELECT privilege to Jeff.
Eddie revokes SELECT privilege from Mike.
What will happen to Jeff's SELECT privilege?
Consider the following sequence of events:
Eddie grants SELECT WITH GRANT OPTION privilege to Mike.
Mike grants SELECT privilege to Jeff.
Eddie revokes SELECT privilege from Mike.
What will happen to Jeff's SELECT privilege?
When Eddie revokes the SELECT privilege from Mike, any privileges that were granted by Mike using the WITH GRANT OPTION will also be revoked. Therefore, Jeff's SELECT privilege will be revoked because Mike's authority to grant those privileges was rescinded, causing a cascading revoke effect.
I've tested myself on an installation and correct answer is B. Jeff's SELECT privilege will be retained
B. Jeff's SELECT privilege will be retained Privileges' will be retained.
citing the referenced link: If you revoke from user the privilege that you granted using the WITH GRANT OPTION keyword, you sever the chain of privileges. That is, when you revoke privileges from user, you automatically revoke the privileges of all users who received privileges from user or from the chain that user created (unless user, or the users who received privileges from user, were granted the same set of privileges by someone else).
B is correct. Revoking a privilege from an authorization name does not revoke that same privilege from any other authorization names that were granted the privilege by that authorization name. For example, assume that CLAIRE grants SELECT WITH GRANT OPTION to RICK, then RICK grants SELECT to BOBBY and CHRIS. If CLAIRE revokes the SELECT privilege from RICK, BOBBY and CHRIS still retain the SELECT privilege. https://www.ibm.com/support/knowledgecenter/SSEPGG_11.1.0/com.ibm.db2.luw.admin.sec.doc/doc/c0005478.html
A. Jeff's SELECT privilege will be revoked -. A is good .
The answer A is not correct. The answer B is correct, Jeff will still have the select privilege.
The answer A is correct.
A user without ACCESSCTRL authority, SECADM authority, or CONTROL privilege is not able to revoke a privilege that they granted through their use of the WITH GRANT OPTION. Also, there is no cascade on the revoke to those who have received privileges granted by the person being revoked. Reference : https://www.ibm.com/support/knowledgecenter/en/SSEPGG_11.1.0/com.ibm.db2.luw.admin.sec.doc/doc/t0005806.html