anchor.diff:                  ?SPACE_SCHEDULE_REPLICATION, ?SPACE_VIEW_QOS, ?SPACE_REGISTER_FILES,
                   ?SPACE_MANAGE_DATASETS,
                   ?SPACE_VIEW_ARCHIVES, ?SPACE_CREATE_ARCHIVES,
  -                % following privs should be added by the upgrade procedure
                   ?SPACE_VIEW_ATM_WORKFLOW_EXECUTIONS,
                   ?SPACE_SCHEDULE_ATM_WORKFLOW_EXECUTIONS
               ]),
  
positive.code:             ?SPACE_MANAGE_DATASETS,
              ?SPACE_VIEW_ARCHIVES,
              ?SPACE_CREATE_ARCHIVES,
              ?SPACE_VIEW_ATM_WORKFLOW_EXECUTIONS,
              ?SPACE_SCHEDULE_ATM_WORKFLOW_EXECUTIONS
              % following privs should be added by the upgrade procedure
          ]),
          <<"user2">> => privileges:from_list([
              ?SPACE_UPDATE, ?SPACE_SET_PRIVILEGES, ?SPACE_ADD_SUPPORT, ?SPACE_REMOVE_SUPPORT,
  
negative.code:             ?SPACE_CREATE_ARCHIVES,
              ?SPACE_VIEW_ATM_WORKFLOW_EXECUTIONS,
              ?SPACE_SCHEDULE_ATM_WORKFLOW_EXECUTIONS
          ]),
          <<"user2">> => privileges:from_list([
              ?SPACE_UPDATE, ?SPACE_SET_PRIVILEGES, ?SPACE_ADD_SUPPORT, ?SPACE_REMOVE_SUPPORT,
  