diff --git a/tests/_utils/start_tidb_cluster_impl b/tests/_utils/start_tidb_cluster_impl
index ebe2a708cef..96981462241 100755
--- a/tests/_utils/start_tidb_cluster_impl
+++ b/tests/_utils/start_tidb_cluster_impl
@@ -228,6 +228,9 @@ done
 
 run_sql "update mysql.tidb set variable_value='60m' where variable_name='tikv_gc_life_time';" ${UP_TIDB_HOST} ${UP_TIDB_PORT}
 run_sql "update mysql.tidb set variable_value='60m' where variable_name='tikv_gc_life_time';" ${DOWN_TIDB_HOST} ${DOWN_TIDB_PORT}
+run_sql "CREATE user 'normal'@'%' identified by '123456';" ${DOWN_TIDB_HOST} ${DOWN_TIDB_PORT}
+run_sql "GRANT select,insert,update,delete,index,create,drop,alter,create view ON *.* TO 'normal'@'%';" ${DOWN_TIDB_HOST} ${DOWN_TIDB_PORT}
+run_sql "FLUSH privileges" ${DOWN_TIDB_HOST} ${DOWN_TIDB_PORT}
 
 cat - >"$OUT_DIR/tiflash-config.toml" <<EOF
 tmp_path = "${OUT_DIR}/tiflash/tmp"
diff --git a/tests/autorandom/run.sh b/tests/autorandom/run.sh
index cda00c80041..25f5dd52001 100644
--- a/tests/autorandom/run.sh
+++ b/tests/autorandom/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-autorandom-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     cdc cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/availability/run.sh b/tests/availability/run.sh
index d3c7d155d17..3fad886af96 100644
--- a/tests/availability/run.sh
+++ b/tests/availability/run.sh
@@ -27,7 +27,7 @@ function prepare() {
     run_sql "CREATE table test.availability2(id int primary key, val int);"
     run_sql "CREATE table test.availability3(id int primary key, val int);"
 
-    run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="mysql://root@127.0.0.1:3306/"
+    run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="mysql://normal:123456@127.0.0.1:3306/"
 }
 
 trap stop_tidb_cluster EXIT
diff --git a/tests/batch_add_table/run.sh b/tests/batch_add_table/run.sh
index 90a7feea4be..d10282b2e9b 100644
--- a/tests/batch_add_table/run.sh
+++ b/tests/batch_add_table/run.sh
@@ -25,7 +25,7 @@ function run() {
     TOPIC_NAME="ticdc-batch-add-table-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/capture_session_done_during_task/run.sh b/tests/capture_session_done_during_task/run.sh
index 574b9e5fbf1..3984c3479fb 100644
--- a/tests/capture_session_done_during_task/run.sh
+++ b/tests/capture_session_done_during_task/run.sh
@@ -17,7 +17,7 @@ function run() {
     TOPIC_NAME="ticdc-capture-session-done-during-task-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/capture_suicide_while_balance_table/run.sh b/tests/capture_suicide_while_balance_table/run.sh
index 7459a927262..c914daee723 100644
--- a/tests/capture_suicide_while_balance_table/run.sh
+++ b/tests/capture_suicide_while_balance_table/run.sh
@@ -40,7 +40,7 @@ function run() {
     export GO_FAILPOINTS='github.com/pingcap/ticdc/cdc/sink/MySQLSinkHangLongTime=1*return(true)'
     run_cdc_server --workdir $WORK_DIR --binary $CDC_BINARY --pd $pd_addr --logsuffix 2 --addr "127.0.0.1:8301"
 
-    SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1"
+    SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1"
     changefeed_id=$(cdc cli changefeed create --pd=$pd_addr --sink-uri="$SINK_URI" 2>&1|tail -n2|head -n1|awk '{print $2}')
 
     run_sql "CREATE DATABASE capture_suicide_while_balance_table;" ${UP_TIDB_HOST} ${UP_TIDB_PORT}
diff --git a/tests/cdc/run.sh b/tests/cdc/run.sh
index 64f8fb9ef93..46c24454080 100755
--- a/tests/cdc/run.sh
+++ b/tests/cdc/run.sh
@@ -24,7 +24,7 @@ function prepare() {
     TOPIC_NAME="ticdc-cdc-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/changefeed_auto_stop/run.sh b/tests/changefeed_auto_stop/run.sh
index 5ec19f82346..6f62968887c 100755
--- a/tests/changefeed_auto_stop/run.sh
+++ b/tests/changefeed_auto_stop/run.sh
@@ -45,7 +45,7 @@ function run() {
     TOPIC_NAME="ticdc-changefeed-auto-stop-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     changefeedid=$(cdc cli changefeed create --pd="http://${UP_PD_HOST_1}:${UP_PD_PORT_1}" --start-ts=$start_ts --sink-uri="$SINK_URI" 2>&1|tail -n2|head -n1|awk '{print $2}')
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/changefeed_error/run.sh b/tests/changefeed_error/run.sh
index 8aac6d082fc..25efe2be35a 100755
--- a/tests/changefeed_error/run.sh
+++ b/tests/changefeed_error/run.sh
@@ -121,7 +121,7 @@ function run() {
     TOPIC_NAME="ticdc-sink-retry-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     changefeedid=$(cdc cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI" 2>&1|tail -n2|head -n1|awk '{print $2}')
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/changefeed_finish/run.sh b/tests/changefeed_finish/run.sh
index 0bd535fc6c5..62bb11ff761 100755
--- a/tests/changefeed_finish/run.sh
+++ b/tests/changefeed_finish/run.sh
@@ -42,7 +42,7 @@ function run() {
     TOPIC_NAME="ticdc-changefeed-pause-resume-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/changefeed_pause_resume/run.sh b/tests/changefeed_pause_resume/run.sh
index f1b823e23f2..1d11a6a3a44 100755
--- a/tests/changefeed_pause_resume/run.sh
+++ b/tests/changefeed_pause_resume/run.sh
@@ -18,7 +18,7 @@ function run() {
     TOPIC_NAME="ticdc-changefeed-pause-resume-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/changefeed_reconstruct/run.sh b/tests/changefeed_reconstruct/run.sh
index 504c1c0e1a8..54c79c64b0a 100755
--- a/tests/changefeed_reconstruct/run.sh
+++ b/tests/changefeed_reconstruct/run.sh
@@ -41,7 +41,7 @@ function run() {
     TOPIC_NAME="ticdc-changefeed-reconstruct-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/cli/run.sh b/tests/cli/run.sh
index 034802ed6e9..8154e2ed33b 100644
--- a/tests/cli/run.sh
+++ b/tests/cli/run.sh
@@ -49,7 +49,7 @@ function run() {
     TOPIC_NAME="ticdc-cli-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
 
     uuid="custom-changefeed-name"
diff --git a/tests/clustered_index/run.sh b/tests/clustered_index/run.sh
index 8bb62001148..934bdf78ce4 100755
--- a/tests/clustered_index/run.sh
+++ b/tests/clustered_index/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-clustered-index-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     cdc cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/common_1/run.sh b/tests/common_1/run.sh
index 49058654931..db559e8441b 100644
--- a/tests/common_1/run.sh
+++ b/tests/common_1/run.sh
@@ -33,6 +33,8 @@ function run() {
 
     run_cdc_server --workdir $WORK_DIR --binary $CDC_BINARY
 
+    # this test contains `recover table`, which requires super privilege, so we
+    # can't use the normal user
     TOPIC_NAME="ticdc-common-1-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
diff --git a/tests/ddl_puller_lag/run.sh b/tests/ddl_puller_lag/run.sh
index ad4c27a314d..f07370abf54 100644
--- a/tests/ddl_puller_lag/run.sh
+++ b/tests/ddl_puller_lag/run.sh
@@ -27,7 +27,7 @@ function prepare() {
     TOPIC_NAME="ticdc-ddl-puller-lag-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka+ssl://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-client-id=ddl_puller_lag&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql+ssl://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql+ssl://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/ddl_reentrant/run.sh b/tests/ddl_reentrant/run.sh
index 32355702e91..74ff8ca3319 100644
--- a/tests/ddl_reentrant/run.sh
+++ b/tests/ddl_reentrant/run.sh
@@ -47,6 +47,8 @@ function complete_ddls() {
 }
 
 changefeedid=""
+# this test contains `recover table`, which requires super privilege, so we
+# can't use the normal user
 SINK_URI="mysql://root@127.0.0.1:3306/"
 
 function check_ts_forward() {
diff --git a/tests/ddl_sequence/run.sh b/tests/ddl_sequence/run.sh
index 13fb1be60c7..0be883c7651 100644
--- a/tests/ddl_sequence/run.sh
+++ b/tests/ddl_sequence/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-ddl-sequence-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/drop_many_tables/run.sh b/tests/drop_many_tables/run.sh
index 93efa49d139..bfee5ab3877 100644
--- a/tests/drop_many_tables/run.sh
+++ b/tests/drop_many_tables/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-drop-tables-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/force_replicate_table/run.sh b/tests/force_replicate_table/run.sh
index fee1fec5528..dd293582c82 100755
--- a/tests/force_replicate_table/run.sh
+++ b/tests/force_replicate_table/run.sh
@@ -60,7 +60,7 @@ function run() {
     TOPIC_NAME="ticdc-force_replicate_table-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?safe-mode=true";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?safe-mode=true";;
     esac
     cdc cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI" --config $CUR/conf/changefeed.toml
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/gc_safepoint/run.sh b/tests/gc_safepoint/run.sh
index ba35c6d3e0c..e2443a315da 100755
--- a/tests/gc_safepoint/run.sh
+++ b/tests/gc_safepoint/run.sh
@@ -77,7 +77,7 @@ function run() {
     TOPIC_NAME="ticdc-gc-safepoint-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/generate_column/run.sh b/tests/generate_column/run.sh
index aa85babacea..4b0edfdead0 100644
--- a/tests/generate_column/run.sh
+++ b/tests/generate_column/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-generate-column-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/kill_owner_with_ddl/run.sh b/tests/kill_owner_with_ddl/run.sh
index 5b982cf3e85..0913f5e555b 100755
--- a/tests/kill_owner_with_ddl/run.sh
+++ b/tests/kill_owner_with_ddl/run.sh
@@ -46,7 +46,7 @@ function run() {
     cd $WORK_DIR
 
     pd_addr="http://$UP_PD_HOST_1:$UP_PD_PORT_1"
-    SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1"
+    SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1"
 
     run_cdc_server --workdir $WORK_DIR --binary $CDC_BINARY --addr "127.0.0.1:8300" --pd $pd_addr
     cdc cli changefeed create --pd=$pd_addr --sink-uri="$SINK_URI"
diff --git a/tests/kv_client_stream_reconnect/run.sh b/tests/kv_client_stream_reconnect/run.sh
index c3bd400884f..7d2e014b4f9 100644
--- a/tests/kv_client_stream_reconnect/run.sh
+++ b/tests/kv_client_stream_reconnect/run.sh
@@ -20,7 +20,7 @@ function run() {
     TOPIC_NAME="kv-client-stream-reconnect-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/many_pk_or_uk/run.sh b/tests/many_pk_or_uk/run.sh
index 6fc0654bbf9..f097eb61dc7 100755
--- a/tests/many_pk_or_uk/run.sh
+++ b/tests/many_pk_or_uk/run.sh
@@ -24,7 +24,7 @@ function prepare() {
     TOPIC_NAME="ticdc-many-pk-or-uk-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/move_table/run.sh b/tests/move_table/run.sh
index 10784fab78d..aaf0ea7b307 100644
--- a/tests/move_table/run.sh
+++ b/tests/move_table/run.sh
@@ -24,7 +24,7 @@ function run() {
     TOPIC_NAME="ticdc-move-table-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
 
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
diff --git a/tests/multi_capture/run.sh b/tests/multi_capture/run.sh
index 5f20c92537d..13691a9bdf7 100755
--- a/tests/multi_capture/run.sh
+++ b/tests/multi_capture/run.sh
@@ -36,7 +36,7 @@ function run() {
     TOPIC_NAME="ticdc-multi-capture-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/multi_source/run.sh b/tests/multi_source/run.sh
index 1e25c48ba18..5e5d28af876 100755
--- a/tests/multi_source/run.sh
+++ b/tests/multi_source/run.sh
@@ -24,7 +24,7 @@ function prepare() {
     TOPIC_NAME="ticdc-multi-source-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/new_ci_collation/run.sh b/tests/new_ci_collation/run.sh
index 9283127f8c4..c8c9e3dee2a 100755
--- a/tests/new_ci_collation/run.sh
+++ b/tests/new_ci_collation/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-new_ci_collation-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?safe-mode=true";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?safe-mode=true";;
     esac
     cdc cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI" --config $CUR/conf/changefeed.toml
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/owner_remove_table_error/run.sh b/tests/owner_remove_table_error/run.sh
index d78907c44e8..3f75d9df659 100644
--- a/tests/owner_remove_table_error/run.sh
+++ b/tests/owner_remove_table_error/run.sh
@@ -24,7 +24,7 @@ function run() {
     cd $WORK_DIR
 
     pd_addr="http://$UP_PD_HOST_1:$UP_PD_PORT_1"
-    SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";
+    SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";
 
     export GO_FAILPOINTS='github.com/pingcap/ticdc/cdc/OwnerRemoveTableError=1*return(true)'
     run_cdc_server --workdir $WORK_DIR --binary $CDC_BINARY --addr "127.0.0.1:8300" --pd $pd_addr
diff --git a/tests/partition_table/run.sh b/tests/partition_table/run.sh
index a124ab28719..ad413890caa 100644
--- a/tests/partition_table/run.sh
+++ b/tests/partition_table/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-partition-table-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/processor_err_chan/run.sh b/tests/processor_err_chan/run.sh
index fd07dd0c703..a692c0edc9d 100644
--- a/tests/processor_err_chan/run.sh
+++ b/tests/processor_err_chan/run.sh
@@ -37,7 +37,7 @@ function run() {
     TOPIC_NAME="ticdc-processor-err-chan-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/processor_panic/run.sh b/tests/processor_panic/run.sh
index 664e252783b..c5ede6ec705 100644
--- a/tests/processor_panic/run.sh
+++ b/tests/processor_panic/run.sh
@@ -29,7 +29,7 @@ function prepare() {
     TOPIC_NAME="ticdc-processor-panic-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-client-id=cdc_test_processor_panic&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/processor_resolved_ts_fallback/run.sh b/tests/processor_resolved_ts_fallback/run.sh
index d61b92b0088..8d95edf7836 100755
--- a/tests/processor_resolved_ts_fallback/run.sh
+++ b/tests/processor_resolved_ts_fallback/run.sh
@@ -22,7 +22,7 @@ function run() {
     TOPIC_NAME="ticdc-processor-resolved-ts-fallback-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://kafka01:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/processor_stop_delay/run.sh b/tests/processor_stop_delay/run.sh
index 5a623996de0..9409b422406 100644
--- a/tests/processor_stop_delay/run.sh
+++ b/tests/processor_stop_delay/run.sh
@@ -18,7 +18,7 @@ function run() {
     TOPIC_NAME="ticdc-processor-stop-delay-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/region_merge/run.sh b/tests/region_merge/run.sh
index 863fe45f6ea..8e0ed9f85d8 100644
--- a/tests/region_merge/run.sh
+++ b/tests/region_merge/run.sh
@@ -38,7 +38,7 @@ function run() {
     TOPIC_NAME="ticdc-region-merge-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/resolve_lock/run.sh b/tests/resolve_lock/run.sh
index 953a73a1aae..f2b7e411123 100755
--- a/tests/resolve_lock/run.sh
+++ b/tests/resolve_lock/run.sh
@@ -24,7 +24,7 @@ function prepare() {
     TOPIC_NAME="ticdc-resolve-lock-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/tidb-txn-mode=pessimistic";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/tidb-txn-mode=pessimistic";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/row_format/run.sh b/tests/row_format/run.sh
index a05e836676c..0b3bd078760 100644
--- a/tests/row_format/run.sh
+++ b/tests/row_format/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-row-format-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/run.sh b/tests/run.sh
index 263d4e7a50f..4203cf3e55e 100755
--- a/tests/run.sh
+++ b/tests/run.sh
@@ -22,7 +22,7 @@ if [ "${1-}" = '--debug' ]; then
 
     cdc server --log-file $WORK_DIR/cdc.log --log-level debug --addr 127.0.0.1:8300 > $WORK_DIR/stdout.log 2>&1 &
     sleep 1
-    cdc cli changefeed create --sink-uri="mysql://root@127.0.0.1:3306/"
+    cdc cli changefeed create --sink-uri="mysql://normal:123456@127.0.0.1:3306/"
 
     echo 'You may now debug from another terminal. Press [ENTER] to exit.'
     read line
diff --git a/tests/simple/run.sh b/tests/simple/run.sh
index 54d8f052661..cf3d2686142 100644
--- a/tests/simple/run.sh
+++ b/tests/simple/run.sh
@@ -26,7 +26,7 @@ function prepare() {
     TOPIC_NAME="ticdc-simple-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka+ssl://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-client-id=cdc_test_simple&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql+ssl://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql+ssl://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/sink_hang/run.sh b/tests/sink_hang/run.sh
index 7b4431daecb..c8f7b58dde6 100644
--- a/tests/sink_hang/run.sh
+++ b/tests/sink_hang/run.sh
@@ -39,7 +39,7 @@ function run() {
     TOPIC_NAME="ticdc-sink-hang-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     if [ "$SINK_TYPE" == "kafka" ]; then
       run_kafka_consumer $WORK_DIR "kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&version=${KAFKA_VERSION}"
diff --git a/tests/sink_retry/run.sh b/tests/sink_retry/run.sh
index f25c95fe519..97124b294d4 100755
--- a/tests/sink_retry/run.sh
+++ b/tests/sink_retry/run.sh
@@ -27,7 +27,7 @@ function run() {
     TOPIC_NAME="ticdc-sink-retry-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/split_region/run.sh b/tests/split_region/run.sh
index 4fe9a9ad936..83ee343ef90 100755
--- a/tests/split_region/run.sh
+++ b/tests/split_region/run.sh
@@ -25,7 +25,7 @@ function run() {
     TOPIC_NAME="ticdc-split-region-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/syncpoint/run.sh b/tests/syncpoint/run.sh
index 81d3fad9dad..8b2425a18c3 100755
--- a/tests/syncpoint/run.sh
+++ b/tests/syncpoint/run.sh
@@ -132,7 +132,7 @@ function run() {
     run_cdc_server --workdir $WORK_DIR --binary $CDC_BINARY
 
     
-    SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1"
+    SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1"
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI" --sync-point --sync-interval=10s
 
     goSql
diff --git a/tests/tiflash/run.sh b/tests/tiflash/run.sh
index dc05858eac7..ddb19e6cf2e 100644
--- a/tests/tiflash/run.sh
+++ b/tests/tiflash/run.sh
@@ -23,7 +23,7 @@ function run() {
     TOPIC_NAME="ticdc-tiflash-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/";;
     esac
     run_cdc_cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI"
     if [ "$SINK_TYPE" == "kafka" ]; then
diff --git a/tests/unified_sorter/run.sh b/tests/unified_sorter/run.sh
index 525d3cb2586..3ced3e1783f 100755
--- a/tests/unified_sorter/run.sh
+++ b/tests/unified_sorter/run.sh
@@ -27,7 +27,7 @@ function run() {
     TOPIC_NAME="ticdc-sink-retry-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&max-message-bytes=102400&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql://root@127.0.0.1:3306/?max-txn-row=1";;
+        *) SINK_URI="mysql://normal:123456@127.0.0.1:3306/?max-txn-row=1";;
     esac
     sort_dir="$WORK_DIR/unified_sort_cache"
     mkdir $sort_dir
diff --git a/tests/unified_sorter_sort_dir_conflict/run.sh b/tests/unified_sorter_sort_dir_conflict/run.sh
index 72deb926919..980e3ae0254 100644
--- a/tests/unified_sorter_sort_dir_conflict/run.sh
+++ b/tests/unified_sorter_sort_dir_conflict/run.sh
@@ -46,7 +46,7 @@ function prepare() {
     TOPIC_NAME="ticdc-simple-test-$RANDOM"
     case $SINK_TYPE in
         kafka) SINK_URI="kafka+ssl://127.0.0.1:9092/$TOPIC_NAME?partition-num=4&kafka-client-id=cdc_test_simple&kafka-version=${KAFKA_VERSION}";;
-        *) SINK_URI="mysql+ssl://root@127.0.0.1:3306/";;
+        *) SINK_URI="mysql+ssl://normal:123456@127.0.0.1:3306/";;
     esac
     changefeedid=$(cdc cli changefeed create --start-ts=$start_ts --sink-uri="$SINK_URI" 2>&1|tail -n2|head -n1|awk '{print $2}')
     if [ "$SINK_TYPE" == "kafka" ]; then