anchor.diff:  }
   --------------------------------------------------
   
  -This is where wildcard support shines. For example, use `customer.*` to only
  -enable read access to the `customer` data:
  +This is where wildcard support shines. For example, use `customer.*` to enable
  +only read access to the `customer` data:
   
   [source,js]
   --------------------------------------------------
  
positive.code: }
  --------------------------------------------------
  
  NOTE: `query` also accepts queries written as string values
  
  [[templating-role-query]]
  ===== Templating a Role Query
  
  You can use Mustache templates in a role query to insert the username of the
  current authenticated user into the role. Like other places in Elasticsearch
  that support templating or scripting, you can specify inline, stored,
  or file based templates and define custom parameters. You access the current
  authenticated user's details through the `_user` parameter. 
  
  For example, the following role query uses a template to insert the username
  of the current authenticated user:
  
negative.code:       the respective indices permission entry.
  
  The specified `query` expects the same format as if it was defined in the
  search request and supports the full {es} {ref}/query-dsl.html[Query DSL].
  
  For example, the following role grants read access only to the documents whose
  `department_id` equals `12`:
  
  [source,js]
  --------------------------------------------------
  