r a superuser to revoke all privileges, but this might
    require use of <code class="literal">CASCADE</code> as stated above.
   </p><p>
    <code class="command">REVOKE</code> can also be done by a role
    that is not the owner of the affected object, but is a member of the role
    that owns the object, or is a member of a role that holds privileges
    <code class="literal">WITH GRANT OPTION</code> on the object.  In this case the
    command is performed as though it were issued by the containing rol