The table owner or the System Security Officer revokes decrypt permission on a table or a list of columns in a table.
revoke decrypt on [owner.] tablename[(columnname [{,columname}])] from user | group | role
