Arcpy ChangePrivileges_management not working

Question

I was trying to revoke access for a user using Python script, but it does not seem to work.
I mean the script runs successfully without any error, but does not what it's intended to...

Here're the steps I follow:

1. I am connecting with the schema owner, and revoking access for another user, say 'B' for a particular dataset [Python]
2. The script runs OK...without any error (exits with code 0)
3. Connect with user B to chk if it's worked...and NO, I can see the data still

Any idea why its hapeening?
I've tried with exclusive lock; and ArcCatalog...even then the same result :(

Ujjwal

Answer 1

OK...I think I have a possible reason for the privileges not being applied.

In a special case of REVOKING ACCESS (my case!), you need to have exclusive lock on the schema. So if other users are still connected, you won't be able to revoke access to a FC or DATASET.

But shouldn't the tool fail (as it does with other functions like Create FeatureClass in similar scenario)...? Design question...may be.

I will update the result after obtaining exclusive lock...currently many users connected to my database.

Cheers!
UPDATE: If the GDB access is governed by ROLES at the database level, it would take precedence during privilege modification via script or ArcCatalog...the solution would be using the role names while granting/revoking access.