anchor.diff:      ;
   
   grantProxy
  -    : GRANT PROXY ON userOrRole
  -    TO userOrRoles
  -    (WITH GRANT OPTION)?
  +    : GRANT PROXY ON userOrRole TO userOrRoles (WITH GRANT OPTION)?
       ;
   
   grantRoles
  -    : GRANT roleNames
  -    TO userOrRoles
  -    (WITH ADMIN OPTION)?
  +    : GRANT roleNames TO userOrRoles (WITH ADMIN OPTION)?
       ;
   
   revokePriveleges
  -    : REVOKE
  -    privType columnList? (COMMA privType columnList?)*
  +    : REVOKE privType columnList? (COMMA privType columnList?)*
       ON objectType? privLevel
       FROM userOrRoles
       ;
  
positive.code:     ;
  
  tlsOption
      : SSL
      | X509
      | CIPHER STRING
      | ISSUER STRING
      | SUBJECT STRING
      ;
  
  resourceOption
  
negative.code: import MySQLKeyword, Keyword, BaseRule, DataType, Symbol;
  
  grantPriveleges
      : GRANT privType columnList? (COMMA privType columnList?)*
      ON objectType? privLevel
      TO userOrRoles
      (WITH GRANT OPTION)?
  