grantAdminRights(ident username) {
  assume exists //accounts/account[username]; # implicitly true in OO implementations
  assume not exists //accounts/account[username]/admin;
 
  insert //accounts/account[username] <admin />;
}