pub fn role_has_column_privilege(
security: &TableSecurity,
column: &str,
subject: &str,
privilege: TableAclPrivilege,
roles: &BTreeMap<String, RoleDefinition>,
memberships: &BTreeMap<RoleMembershipKey, RoleMembership>,
) -> bool