anchor.diff:      ;
   
   alterRoleSetConfig
  -    : ALTER ROLE (roleSpecification | ALL) (IN DATABASE databaseName)? SET STRING ((TO | EQ) (STRING | ID | NUMBER | DEFAULT) | FROM CURRENT)
  +    : alterRoleConfigOp SET STRING ((TO | EQ) (STRING | ID | NUMBER | DEFAULT) | FROM CURRENT)
       ;
   
   alterRoleResetConfig
  -    : ALTER ROLE (roleSpecification | ALL) (IN DATABASE databaseName)? RESET (STRING | ALL)
  +    : alterRoleConfigOp RESET (STRING | ALL)
       ;
   
   dropRole
  
positive.code:     ;
  
  renameUser
      : ALTER USER roleName RENAME TO roleName
      ;
  
  alterUserSetConfig
      : ALTER USER (roleSpecification | ALL) (IN DATABASE databaseName)? SET STRING ((TO | EQ) (STRING | ID | NUMBER | DEFAULT) | FROM CURRENT)
      ;
  
  alterUserResetConfig
      : ALTER USER (roleSpecification | ALL) (IN DATABASE databaseName)? RESET (STRING | ALL)
      ;
  
  dropUser
  
negative.code:     ;
  
  createUser
      : CREATE USER userName (WITH? roleOptions)?
      ;
  
  roleOption
  