Some initial work on GRANT/REVOKE