anchor.diff:      ;
   
   lockOption
  -    : ACCOUNT LOCK
  -    | ACCOUNT UNLOCK
  +    : ACCOUNT (LOCK | UNLOCK)
       ;
   
   alterUser
  
positive.code:     ;
  
  tlsOption
      : SSL
      | X509
      | CIPHER STRING
      | ISSUER STRING
      | SUBJECT STRING
      ;
  
  resourceOption
  
negative.code:     ;
  
  role
      : STRING AT_ STRING | STRING | ID
      ;
  
  roles
  