quote database name when granting access