Function select_acl_grantor 

pub fn select_acl_grantor(
    security: &DatabaseSecurity,
    privilege: DatabaseAclPrivilege,
    current_user: &str,
    roles: &BTreeMap<String, RoleDefinition>,
    memberships: &BTreeMap<RoleMembershipKey, RoleMembership>,
) -> Option<String>