Files
sonr/docs/reference/messages/dwn-revoke-permission.mdx
T

63 lines
1.5 KiB
Plaintext
Raw Normal View History

2025-10-03 14:45:52 -04:00
---
title: Revoke DWN Permission
description: Immediately remove access rights previously granted to other users
2026-09-02 16:53:38 -04:00
seo:
title: "DWN Permission Revocation"
2025-10-03 14:45:52 -04:00
---
2026-09-02 16:53:38 -04:00
:::warning
Permission revocation takes effect **immediately**. Active sessions using the permission will be terminated.
:::
2025-10-03 14:45:52 -04:00
## Revocation Process
### Immediate Effects
- Permission becomes invalid instantly
- Active operations are interrupted
- Cached permissions are invalidated
- No grace period provided
### What Gets Revoked
- The specific permission identified by `permissionId`
- All derived sub-permissions
- Any delegated permissions from this grant
## Finding Permissions to Revoke
2026-09-02 16:53:38 -04:00
:::tip
Query your active permissions before revoking:
```bash
snrd query dwn permissions-request --grantor <your_did>
```
:::
2025-10-03 14:45:52 -04:00
## Authorization Requirements
You must be either:
- **Original Grantor**: The entity who created the permission
- **Admin Permission Holder**: Have permission management rights
## Revocation Scenarios
### Security Incident
```bash
# Revoke all permissions for compromised account
snrd tx dwn permissions-revoke --grantee <compromised_did> --all
```
### Project Completion
```bash
# Revoke team access after project ends
snrd tx dwn permissions-revoke --permission-id <team_permission>
```
### Access Audit
```bash
# Revoke unused permissions discovered in audit
snrd tx dwn permissions-revoke --permission-id <unused_permission>
```
2026-09-02 16:53:38 -04:00
:::note
Consider notifying affected users before revoking permissions to avoid disruption.
:::