pub fn apply_database_acl(
statement: &GrantDatabaseStmt,
grantees: &[String],
privileges: &[DatabaseAclPrivilege],
current_user: &str,
roles: &BTreeMap<String, RoleDefinition>,
memberships: &BTreeMap<RoleMembershipKey, RoleMembership>,
current: &DatabaseSecurity,
) -> Result<(DatabaseSecurity, usize), SQLError>