3600
MySQLERRORNotableAccess ControlHIGH confidence

Partial revoke not supported with GRANT OPTION

Production Risk

Low — The REVOKE fails; no privilege change occurs.

How to reproduce
trigger — this will error
trigger — this will error
GRANT SELECT ON *.* TO 'user'@'%' WITH GRANT OPTION;
REVOKE SELECT ON restricted_db.* FROM 'user'@'%';

expected output

ERROR 3600 (HY000): Partial revoke is not supported with GRANT OPTION.

Fix

Remove GRANT OPTION first

Remove GRANT OPTION first
REVOKE GRANT OPTION ON *.* FROM 'user'@'%';
REVOKE SELECT ON restricted_db.* FROM 'user'@'%';

Why this works

Strips GRANT OPTION before applying the partial revoke.

What not to do

Version notes

Sources
Official documentation ↗

MySQL 8.0 — 3600 ER_PARTIAL_REVOKE_NOT_SUPPORTED_WITH_GRANT_OPTION

Content generated with AI assistance and reviewed for accuracy. Found an error? hello@errcodes.dev

← All MySQL errors