>u1</code> as well as by other
    members of role <code class="literal">g1</code>.
   </p><p>
    If the role executing <code class="command">REVOKE</code> holds privileges
    indirectly via more than one role membership path, it is unspecified
    which containing role will be used to perform the command.  In such cases
    it is best practice to use <code class="command">SET ROLE</code> to become the specific
    role you want to do the <code class="command">REVOKE</code> as.  Failure to do so might
   