anchor.diff:      | TEMP
       | EXECUTE
       | USAGE
  +    | ALL PRIVILEGES?
       ;
   
   onObjectClause_
  -    : SEQUENCE
  +    : TABLE? tableName (COMMA_ tableName)*
       | DATABASE
  +    | SCHEMA
       | DOMAIN
       | FOREIGN
       | FUNCTION
  
positive.code:     | ALL
      | LANGUAGE
      | LARGE OBJECT
      | SCHEMA
      | TABLESPACE
      | TYPE
      | TABLE? tableName (COMMA_ tableName)*
      ;
  
  createUser
  
negative.code: import Symbol, Keyword, Literals, BaseRule;
  
  grant
      : GRANT (privilegeClause_ | roleClause_)
      ;
  
  revoke
      : REVOKE optionForClause_? (privilegeClause_ | roleClause_)
      ;
  
  privilegeClause_
      : privileges_ ON onObjectClause_
      ;
      
  roleClause_
      : ignoredIdentifiers_
      ;
  
  optionForClause_
      : (GRANT | ADMIN) OPTION FOR
      ;
      
  privileges_
      : privilegeType_ columnNames? (COMMA_ privilegeType_ columnNames?)*
      ;
  
  privilegeType_
      : SELECT
      | INSERT
      | UPDATE
      | DELETE
  