pub fn diff_default_privileges(
target: &[DefaultPrivilegeRule],
source: &[DefaultPrivilegeRule],
managed_roles: &BTreeSet<Identifier>,
) -> Vec<DefaultPrivilegeChange>Expand description
Compute ALTER DEFAULT PRIVILEGES changes needed to converge target
(live database) toward source (desired state).
managed_roles is passed to the inner super::grants::diff_grants call
so that the lenient policy applies: unmanaged grantees in the live catalog
never produce REVOKE steps.