anchor.diff:  grant
       : GRANT
       (
  -    	(grantSystemPrivileges | grantObjectPrivileges) (CONTAINER EQ_OR_ASSIGN (CURRENT | ALL))?
  +    	(grantSystemPrivileges | grantObjectPrivilegeClause) (CONTAINER EQ_OR_ASSIGN (CURRENT | ALL))?
           | grantRolesToPrograms
       )
       ;
  
positive.code:     : userName (COMMA userName)* IDENTIFIED BY STRING (COMMA STRING)*
      ;
      
  grantObjectPrivileges
      : objectPrivilege (COMMA objectPrivilege)*
      ;
      
  grantObjectPrivilege
      : (objectPrivilege | ALL PRIVILEGES?)( LEFT_PAREN columnName (COMMA columnName)* RIGHT_PAREN)?
      ;
  
  objectPrivilege
      : ID *?
      ;
      
  grantRolesToPrograms
  
negative.code: 
  
  granteeClause
      : grantee (COMMA grantee)*
      ;
      
  grantee
  