Query to find users granted an ACL -- the natural question after seeing ORA-24247