add a test for grant/revoke multiple privileges