anchor.diff:  
   
   granteeClause
  -    : grantee (COMMA grantee)
  +    : grantee (COMMA grantee)*
       ;
       
   grantee
  
positive.code:     : userName (COMMA userName)* IDENTIFIED BY STRING (COMMA STRING)*
      ;
      
  grantObjectPrivileges
      : objectPrivilege (COMMA objectPrivilege)*
      ;
      
  grantObjectPrivilege
      : (objectPrivilege | ALL PRIVILEGES?)( LEFT_PAREN columnName (COMMA columnName)* RIGHT_PAREN)?
      ;
  
  objectPrivilege
      : ID *?
      ;
      
  grantRolesToPrograms
  
negative.code: grant
      : GRANT
      (
      	(grantSystemPrivileges | grantObjectPrivilegeClause) (CONTAINER EQ_OR_ASSIGN (CURRENT | ALL))?
          | grantRolesToPrograms
      )
      ;
  