feat(query): add other privilige check

[TCeason]

I hereby agree to the terms of the CLA available at: https://databend.rs/dev/policies/cla/

Summary

Add some privileges:

privilege	object	plan
select	Database, Table	ShowCreateDatabase, UseDatabase, ShowCreateTable, DescribeTable, Query
create	Global, Table	CreateUDF, CreateDatabase, CreateTable, CreateView
Drop	Global, Table	DropUDF, DropDatabase, UndropDatabase, DropTable, UndropTable, DropTableClusterKey, DropView
Alter	Global, Table	AlterUser, AlterUDF, RenameDatabase, RevertTable, AddTableColumn, DropTableColumn, AlterTableClusterKey, ReclusterTable, AlterView
Delete	Table	TruncateTable, Delete
Super	Global, Table	SetVariable, UnSetVariable, Kill, OptimizeTable, AnalyzeTable
Insert	Table	Insert
Update	Table	Update
CreateUser	Global	CreateUser
DropUser	Global	DropUser
CreateRole	Global	CreateRole
DropRole	Global	DropRole
Grant	Global	GrantShareObject, RevokeShareObject, AlterShareTenants, ShowObjectGrantPrivileges, ShowGrantTenantsOfShare, SetRole, ShowGrants, ShowRoles, GrantRole, GrantPriv, RevokePriv, RevokeRole
old_table: [Alter, Drop]; new_table: [Create, Insert]	Table	RenameTable

These objects share, catalog, stage, fileformat are not implemented at the grant level, So we set the object to Global.

Privilege	Object	Plan
Super	Global	CreateShare
Super	Global	DropShare
Super	Global	DescShare
Super	Global	ShowShares
Super	Global	Call
Super	Global	ShowCreateCatalog
Super	Global	CreateCatalog
Super	Global	DropCatalog
Super	Global	ListStage
Super	Global	CreateStage
Super	Global	DropStage
Super	Global	RemoveStage
Super	Global	CreateFileFormat
Super	Global	DropFileFormat
Super	Global	ShowFileFormats

And Plan::Copy has two items: IntoTable and IntoStage, the different item need to check for different privileges.

Privilege	Object	Plan
Instert	Table	CopyPlan::IntoTable
Super	Global	CopyPlan::IntoStage

These plans no need to check privileges:

Presign
ExplainAst
ExplainSyntax
ExistsTable

part of #10385

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Ignored Deployment

Name	Status	Preview	Comments	Updated
databend	⬜️ Ignored (Inspect)			Mar 16, 2023 at 0:26AM (UTC)

[BohuTANG]

Can we support complex privileges? like:

To use REPLACE , you must have both the INSERT and DELETE privileges for the table

It's INSERT&DELETE not INSERT|DELETE.