revoke connect from %user; revoke resource from %user;