issue #18661: allow compound privileges