presto-main/src/main/java/io/prestosql/security/AccessControlManager.java/AccessControlManager/checkCanRevokeRoles
class AccessControlManager:    @Override
    public void checkCanRevokeRoles(SecurityContext context, Set<String> roles, Set<PrestoPrincipal> grantees, boolean adminOptionFor, Optional<PrestoPrincipal> grantor, String catalogName)
    {
        requireNonNull(context, "context is null");
        requireNonNull(roles, "roles is null");
        requireNonNull(grantees, "grantees is null");
        requireNonNull(grantor, "grantor is null");
        requireNonNull(catalogName, "catalogName is null");

        authenticationCheck(() -> checkCanAccessCatalog(context.getIdentity(), catalogName));

        CatalogAccessControlEntry entry = getConnectorAccessControl(context.getTransactionId(), catalogName);
        if (entry != null) {
            authorizationCheck(() -> entry.getAccessControl().checkCanRevokeRoles(entry.toConnectorSecurityContext(context), roles, grantees, adminOptionFor, grantor, catalogName));
        }
    }