revoke update, delete on table public.audit_log from app_user;