anchor.diff:  | close durable-cq                       | DATA:MANAGE                      |
   | compact disk-store                     | DATA:MANAGE                      |
   | compact offline-disk-store             | DATA:MANAGE                      |
  -| configure pdx                          | DATA:MANAGE                      |
  +| configure pdx                          | CLUSTER:MANAGE                   |
   | create async-event-queue               | DATA:MANAGE                      |
   | create defined indexes                 | DATA:MANAGE                      |
   | create disk-store                      | DATA:MANAGE                      |
  
positive.code: The operations are not hierarchical;
  `MANAGE` does not imply `WRITE`, and `WRITE` does not imply `READ`.
  
  Some operations further specify a region name in the permission.
  This permits restricting operations on that region to only those
  authorized principals.
  And within a region, some operations may specify a key.
  This permits restricting operations on that key within that region to 
  only those authorized principals.
  
  This table classifies the permissions assigned for operations common to
  a Client-Server interaction.
  
negative.code: | gc                                     | CLUSTER:MANAGE                   |
  | get &#8209;key=key1 &#8209;region=region1        | DATA:READ:RegionName:Key         |
  | import data                            | DATA:WRITE:RegionName            |
  | import cluster-configuration           | CLUSTER:MANAGE                   |
  | list async-event-queues                | CLUSTER:READ                     |
  | list clients                           | CLUSTER:READ                     |
  | list deployed                          | CLUSTER:READ                     |
  