pub fn diff(current: &RoleGraph, desired: &RoleGraph) -> Vec<Change>Expand description
Compute the list of changes needed to bring current to desired.
Changes are ordered so that dependencies are respected: creates before grants, revokes before drops, etc.