pub fn validate_schema_acl_roles(
statement: &GrantSchemaStmt,
grantees: &[AclGrantee],
requested_grantor: Option<&str>,
current_user: &(impl RoleSubject + ?Sized),
roles: &BTreeMap<String, RoleDefinition>,
) -> Result<(), SQLError>