anchor.diff:        [{name, <<"Cluster Admin">>},
          {desc, <<"Can manage all cluster features EXCEPT security.">>}],
         [{[admin], none},
  +       {[n1ql, curl], none},
          {[], all}]},
        {bucket_admin, [bucket_name],
         [{name, <<"Bucket Admin">>},
  
positive.code:       [{name, <<"Cluster Admin">>},
         {desc, <<"Can manage all cluster features EXCEPT security.">>}],
        [{[admin], none},
         {[], all}]},
       {bucket_admin, [bucket_name],
        [{name, <<"Bucket Admin">>},
  
negative.code:        {desc, <<"Can lookup system catalog information">>}],
        [{[{bucket, bucket_name}, n1ql, index], [list]},
         {[n1ql, meta], [read]},
         {[ui], [read]},
         {[pools], [read]}]},
       {query_external_access, [],
        [{name, <<"Query External Access">>},
         {desc, <<"Can execute CURL statement">>}],
        [{[n1ql, curl], [execute]},
         {[ui], [read]},
         {[pools], [read]}]}].
  
  