New sudo implementation for privilege grants on specific objects (LEV-90)