anchor.diff:  
   * `ON [_object-type_] [_schema_.]_object_`
   +
  -Specifies an object on which to grant privileges. See <<database_object_names,"Database Object Names>>. _object-type_ can be:
  -
  -** [FUNCTION] [_schema_.]_function-name_, where _function-name_ is the name of a user-defined function in the database.
  -** [LIBRARY] [_schema_.]_library-name_, where _library-name_ is the name of a library object in the database. 
  -** [PROCEDURE] [_schema_.]_procedure-name_, where _procedure-name_ is the name of a stored procedure in Java (SPJ)
  +Specifies an object on which to grant privileges. If none is specified, it defaults to TABLE. See <<database_object_names,"Database Object Names>> for more details. _object-type_ can be:
  +
  +** FUNCTION [_schema_.]_function-name_, where _function-name_ is the name of a user-defined function in the database.
  +** LIBRARY [_schema_.]_library-name_, where _library-name_ is the name of a library object in the database. 
  +** PROCEDURE [_schema_.]_procedure-name_, where _procedure-name_ is the name of a stored procedure in Java (SPJ)
   registered in the database. 
  -** [SEQUENCE] [_schema_.]_sequence-name_, where _sequence-name_ is the name of a sequence generator.
  +** SEQUENCE [_schema_.]_sequence-name_, where _sequence-name_ is the name of a sequence generator.
   ** [TABLE] [_schema_.]_object-name_, where _object-name_ is the name of a table or view. 
   
   * `FROM {_grantee_ [,_grantee_] &#8230; }`
  
positive.code: 
  * `ON [_object-type_] [_schema_.]_object_`
  +
  Specifies an object on which to grant privileges. _object-type_ can be:
  
  ** `[FUNCTION] [_schema_.]_function-name_`, where _function-name_ is the name of a user-defined function (UDF) in the database.
  ** `[LIBRARY] [_schema_.]_library-name_`, where _library-name_ is the name of a library object in the database.
  ** `[PROCEDURE] [_schema_.]_procedure-name_`, where _procedure-name_ is the name of a stored procedure in java (SPJ) 
  registered in the database.
  ** `[SEQUENCE] [_schema_.]_sequence-name_`, where _sequence-name_ is the name of a sequence object in the database.
  ** `[TABLE] [_schema_.]_object_`, where _object_ is a table or view. see <<database_object_names,database object names>>.
  
  * `TO {_grantee_ &#8230; }`
  +
  Specifies one or more _auth-names_ to which you grant privileges.
  
  * `_auth-name_`
  +
  Specifies the name of an authorization id to which you grant privileges. see <<authorization_ids,authorization ids>>. 
  The authorization id must be a registered database username, an existing role name, or public. the name is a regular 
  or delimited case-insensitive identifier. see <<case_insensitive_delimited_identifiers,case-insensitive delimited identifiers>>.
  If you grant a privilege to public, the privilege remains available to all users, unless it is later revoked from public.
  
  * `WITH GRANT OPTION`
  
negative.code: | REFERENCES [column-list] | Can create constraints that reference the object.
  | SELECT     [column-list] | Can use the select statement.
  | UPDATE     [column-list] | Can use the update statement on table objects.
  | USAGE                    | For libraries, can create procedures and functions on library objects.
  For sequence generators, can use the sequence in a SQL statement.
  | ALL                      | All the applicable privileges. When you specify all for a table or view, 
  this includes the select, delete, insert, references, and update privileges. When the object is a 
  stored procedure or user-defined function (UDF), only the execute privilege is applied. When the 
  