Grant / Revoke on IDS 7.3

Hello I'm confused with the grant / revoke statements. I have executed following lines to my database: GRANT ALL ON mytable TO PUBLIC; GRANT ALL ON mytable TO quest; REVOKE INSERT,DELETE,UPDATE ON mytable FROM quest; I see two lines in systabauth (tabid 281 is mytable): grantor grantee tabid tabauth informix quest 281 s----xar informix public 281 su-idxar However user quest can do anything to the table mytable. Must I explicitely name all users who are allowed to do something? I think the normal situation is that all users are allowed to do all operations and only special users are restricted. What is the easiest way to set some restrictions to user quest and allow all other users have full control to tables? Best regards PAT