docs(query): add access control doc about privilege

[TCeason]

Summary

1. add doc: priv

2. fix grant create user/stage/role err

Questions

1. I try to add priv doc. But I find in privilege_access.rs
   more plan does not check privilege.

2. And I think this is unreasonable? Why create view need alter priv?
   cc @BohuTANG

Plan::CreateView(plan) => {
    session
        .validate_privilege(
            &GrantObject::Database(plan.catalog.clone(), plan.database.clone()),
            UserPrivilegeType::Alter,
        )
        .await?;
}

mysql> show grants;
+-----------------------------------------------------+
| Grants                                              |
+-----------------------------------------------------+
| GRANT CREATE,CREATE ROLE ON *.* TO 'b'@'%'          |
| GRANT SELECT ON 'default'.'system'.'one' TO 'b'@'%' |
+-----------------------------------------------------+
2 rows in set (0.03 sec)
Read 0 rows, 0.00 B in 0.004 sec., 0 rows/sec., 0.00 B/sec.

mysql> create view v_t2 as select * from t;
ERROR 1105 (HY000): Code: 1063, displayText = Permission denied, user 'b'@'%' requires ALTER privilege on 'default'.'default'.*.

Closes #10385

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated
databend	✅ Ready (Inspect)	Visit Preview	💬 Add your feedback	Mar 9, 2023 at 5:07AM (UTC)

[BohuTANG]

I try to add priv doc. But I find in privilege_access.rs
more plan does not check privilege.

Yes, we need more privileges to add .

And I think this is unreasonable? Why create view need alter priv?

Not make sense, we can fix it.

[Xuanwo]

Hi there, could you please provide a more detailed title for this PR, instead of just using add doc: priv? A clear and descriptive title would make it easier for us to write comprehensive and accurate changelogs. Thank you!

[BohuTANG]

Better to move here?

[BohuTANG]

Before Use cases after SQL Functions

[TCeason]

Yes, we need more privileges to add .

Ok, I will add it in this pr. Now it will be set draft, after this done it will be ready for review.