presto-spi/src/main/java/io/prestosql/spi/connector/ConnectorAccessControl.java/ConnectorAccessControl/checkCanGrantRoles
class ConnectorAccessControl:    default void checkCanGrantRoles(ConnectorSecurityContext context, Set<String> roles, Set<PrestoPrincipal> grantees, boolean withAdminOption, Optional<PrestoPrincipal> grantor, String catalogName)
    {
        denyGrantRoles(roles, grantees);
    }