planner: only users with SUPER or CONNECTION_ADMIN privilege can kill auto analyze

[xuyifangreeneyes]

What problem does this PR solve?

Issue Number: close #33058

Problem Summary:
Users without privilege can kill auto analyze.

What is changed and how it works?

Only users with SUPER or CONNECTION_ADMIN privilege can kill auto analyze

Check List

Tests

• Unit test
• Integration test(Since tests in tidb repo usually use mockSessionManager rather than the real Server, I put the testcase in https://github.com/pingcap/automated-tests/pull/999)
• Manual test (add detailed scripts or steps below)
• No code

Side effects

• Performance regression: Consumes more CPU
• Performance regression: Consumes more Memory
• Breaking backward compatibility

Documentation

• Affects user behaviors
• Contains syntax changes
• Contains variable changes
• Contains experimental features
• Changes MySQL compatibility

Release note

None

[ti-chi-bot]

[REVIEW NOTIFICATION]

This pull request has been approved by:

• jackysp
• morgo

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

Reviewer can indicate their review by submitting an approval review.
Reviewer can cancel approval by submitting a request changes review.

[xuyifangreeneyes]

/cc @chrysan @morgo @winoros @time-and-fate

[sre-bot]

Code Coverage Details: https://codecov.io/github/pingcap/tidb/commit/afda468cda9f8d44a21263c52d890a6fabfdb142

[morgo]

Historically PROCESS privilege is required to kill connections that belong to other users. MySQL 8.0 changes this to requiring CONNECTION_ADMIN: https://dev.mysql.com/doc/refman/8.0/en/privileges-provided.html#priv_connection-admin

This helps avoid the problem that super is overloaded (it is used by too many features, which makes it less secure).

[xuyifangreeneyes]

Fixed.

[jackysp]

LGTM

[Reminiscent]

/merge

[ti-chi-bot]

This pull request has been accepted and is ready to merge.

Commit hash: a80965e

[Reminiscent]

/merge

[ti-chi-bot]

@xuyifangreeneyes: Your PR was out of date, I have automatically updated it for you.

At the same time I will also trigger all tests for you:

/run-all-tests

If the CI test fails, you just re-trigger the test that failed and the bot will merge the PR for you after the CI passes.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the ti-community-infra/tichi repository.