Stephen Frost <sfrost@snowman.net> writes:
> Is there some way we could use that 'ON' is required for the
> 'privileges' grant?
Well, the difficulty is that we can't see the ON until we've scanned
the list of privilege or role names. Now that I've calmed down a bit,
the solution is fairly obvious: the name list has to be left as strings
during the grammar. We'll check the privilege names for validity at
execution.
regards, tom lane