pub fn apply_schema_acl(
statement: &GrantSchemaStmt,
grantees: &[String],
privileges: &[SchemaAclPrivilege],
current_user: &str,
roles: &BTreeMap<String, RoleDefinition>,
memberships: &BTreeMap<RoleMembershipKey, RoleMembership>,
current: &SchemaSecurity,
) -> Result<(SchemaSecurity, usize), SQLError>