anchor.diff:         {desc, <<"Can execute DELETE statement on bucket to delete data">>}],
         [{[{bucket, bucket_name}, n1ql, delete], [execute]},
          {[{bucket, bucket_name}, data, docs], [delete]},
  +       {[{bucket, bucket_name}, settings], [read]},
          {[ui], [read]},
          {[pools], [read]}]},
        {query_manage_index, [bucket_name],
         [{name, <<"Query Manage Index">>},
          {desc, <<"Can manage indexes for the bucket">>}],
         [{[{bucket, bucket_name}, n1ql, index], all},
  +       {[{bucket, bucket_name}, settings], [read]},
          {[ui], [read]},
          {[pools], [read]}]},
        {query_system_catalog, [],
         [{name, <<"Query System Catalog">>},
          {desc, <<"Can lookup system catalog information">>}],
         [{[{bucket, any}, n1ql, index], [list]},
  +       {[{bucket, any}, settings], [read]},
          {[n1ql, meta], [read]},
          {[ui], [read]},
          {[pools], [read]}]},
  
positive.code:        {desc, <<"Can execute UPDATE statement on bucket to update data">>}],
        [{[{bucket, bucket_name}, n1ql, update], [execute]},
         {[{bucket, bucket_name}, data, docs], [upsert]},
         {[ui], [read]},
         {[pools], [read]}]},
       {query_insert, [bucket_name],
  
negative.code:       [{name, <<"Query External Access">>},
         {desc, <<"Can execute CURL statement">>}],
        [{[n1ql, curl], [execute]},
         {[{bucket, any}, settings], [read]},
         {[ui], [read]},
         {[pools], [read]}]},
       {replication_target, [bucket_name],
  