privilege: limit the privileges in memory schemas (#35260)

[ti-srebot]

cherry-pick #35260 to release-5.1
You can switch your code base to this Pull Request by using git-extras:

# In tidb repo:
git pr https://github.com/pingcap/tidb/pull/35331

After apply modifications, you can push your change to this PR via:

git push git@github.com:ti-srebot/tidb.git pr/35331:release-5.1-395ccbe22d5e

---

What problem does this PR solve?

Issue Number: close #35205

Problem Summary:

In the previous implementation, metrics_schema.t isn't one of the metrics tables, so the privilege checker is skipped. However, because the memory databases are not persist in storage, DDL hangs because of "database not exists" error.

What is changed and how it works?

This PR disallows users run CREATE/ALTER/DROP/INSERT/UPDATE/DELETE statements on any tables in memory databases.

Check List

Tests

• Unit test
• Integration test
• Manual test (add detailed scripts or steps below)
• No code

Side effects

• Performance regression: Consumes more CPU
• Performance regression: Consumes more Memory
• Breaking backward compatibility

After this PR, the following operations on memory tables are not supported anymore:

• information_schema: REFERENCES, EXECUTE, SHOW VIEW, LOCK TABLES.
• performance_schema: CREATE, LOCK TABLES.
• metrics_schema: CREATE, CREATE VIEW. REFERENCES, EXECUTE, SHOW VIEW, LOCK TABLES.

Documentation

• Affects user behaviors
• Contains syntax changes
• Contains variable changes
• Contains experimental features
• Changes MySQL compatibility

Release note

Please refer to Release Notes Language Style Guide to write a quality release note.

Fix an issue that client stuck when create table in metrics_schema.

[ti-chi-bot]

[REVIEW NOTIFICATION]

This pull request has not been approved.

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

Reviewer can indicate their review by submitting an approval review.
Reviewer can cancel approval by submitting a request changes review.

[ti-chi-bot]

@ti-srebot: This cherry pick PR is for a release branch and has not yet been approved by release team.
Adding the do-not-merge/cherry-pick-not-approved label.

To merge this cherry pick, it must first be approved by the collaborators.

AFTER it has been approved by collaborators, please ping the release team in a comment to request a cherry pick review.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[ti-srebot]

/run-all-tests

[ti-srebot]

@tangenta you're already a collaborator in bot's repo.