anchor.diff:      ;
   
   privilegeType_
  -    : IDENTIFIER_+?
  +    : ALL PRIVILEGES?
  +    | IDENTIFIER_+?
       ;
   
   class_
  
positive.code:     : classTypePrivileges_ (ON onClassTypeClause_)?
      ;
      
  optionFor_
      : GRANT OPTION FOR
      ;
      
  classPrivileges_
      : (ALL PRIVILEGES? | (privilegeType_ columnNames? (COMMA_ privilegeType_ columnNames?)*))
      ;
  
  onClassClause_
  
negative.code:     ;
  
  revoke
      : REVOKE (optionForClause_? classPrivilegesClause_ | classTypePrivilegesClause_)
      ;
  
  deny
  