grant a permission
revoke to undo the permissions given by grant

deny – to make the data invisible to the user, cannot be given access by grant again..kinda permanent change