SENTRY-506: Default implementation of SentryAccessController to do grant/revoke role/privlege