select grantee_id, privilege from acs_permissions where object_id = :object_id and privilege in ('[join $privs "', '"]')