anchor.diff:       {ro_admin, [],
         [{name, <<"Read Only Admin">>},
          {desc, <<"Can view ALL cluster features.">>}],
  -      [{[{bucket, all}, password], none},
  -       {[{bucket, all}, data], none},
  +      [{[{bucket, any}, password], none},
  +       {[{bucket, any}, data], none},
          {[admin, security], [read]},
          {[admin], none},
          {[], [read]}]},
  
positive.code:        {desc, <<"Can manage ALL bucket features for specified buckets (incl. start/stop XDCR)">>}],
        [{[{bucket, bucket_name}, xdcr], [read, execute]},
         {[{bucket, bucket_name}], all},
         {[{bucket, all}, data], none},
         {[{bucket, all}, settings], [read]},
         {[admin], none},
         {[], [read]}]},
       {bucket_sasl, [bucket_name],
  
negative.code:     false;
  object_match([{_Same, _} | RestOfObject], [{_Same, any} | RestOfObjectPattern]) ->
      object_match(RestOfObject, RestOfObjectPattern);
  object_match([{_Same, any} | RestOfObject], [{_Same, _} | RestOfObjectPattern]) ->
      object_match(RestOfObject, RestOfObjectPattern);
  object_match([_Same | RestOfObject], [_Same | RestOfObjectPattern]) ->
      object_match(RestOfObject, RestOfObjectPattern);
  