grant check with grant option