fix test

Author: TCeason

tests/suites/0_stateless/18_rbac/18_0012_temp_table.result

@@ -5,7 +5,7 @@
 >>>> create or replace database test
 >>>> grant role role1 to owner
 mysql: [Warning] Using a password on the command line interface can be insecure.
-ERROR 1105 (HY000) at line 1: PermissionDenied. Code: 1063, Text = Permission denied: privilege [Create] is required on 'default'.'test'.* for user 'owner'@'%' with roles [role1]. Note: Please ensure that your current role have the appropriate permissions to create a new Warehouse|Database|Table|UDF|Stage|Connection..
+ERROR 1105 (HY000) at line 1: PermissionDenied. Code: 1063, Text = Permission denied: privilege [Create] is required on 'default'.'test'.* for user 'owner'@'%' with roles [role1]. Note: Please ensure that your current role have the appropriate permissions to create a new Warehouse|Database|Table|UDF|Stage|Connection.
 mysql: [Warning] Using a password on the command line interface can be insecure.
 2
 1

tests/suites/0_stateless/18_rbac/18_0015_connection_rbac.result

@@ -6,7 +6,6 @@ c3	s3	access_key_id=c3 endpoint_url=******00/ region=******uto secret_access_key
 c1	azblob	endpoint_url=******com
 c2	s3	access_key_id=******min endpoint_url=******00/ region=******uto secret_access_key=******min
 c3	s3	access_key_id=c3 endpoint_url=******00/ region=******uto secret_access_key=c3
-toronto	s3	access_key_id=******id> secret_access_key=******ey>
 === NEW LOGIC: user has super privileges can operator all connections with enable_experimental_connection_privilege_check=1 ===
 === TEST USER A WITH SUPER PRIVILEGES ===
 --- CREATE 3 CONNECTIONS WILL SUCCESS ---
@@ -44,38 +43,23 @@ c2	s3	access_key_id=******min endpoint_url=******00/ region=******uto secret_acc
 c3	s3	access_key_id=c3 endpoint_url=******00/ region=******uto secret_access_key=c3
 --- user b can not drop connection c2 ---
 Error: APIError: QueryFailed: [1063]Permission denied: privilege [AccessConnection] is required on CONNECTION c2 for user 'b'@'%' with roles [public,role1]. Note: Please ensure that your current role have the appropriate permissions to create a new Warehouse|Database|Table|UDF|Stage|Connection.
-Error: APIError: QueryFailed: [4000]invalid input parameter (fail to get connection_name c2: PermissionDenied. Code: 1063, Text = Permission denied: privilege AccessConnection is required on connection c2 for user 'b'@'%'.
-
-
-)
+1
 Error: APIError: QueryFailed: [1063]Permission denied: privilege ACCESS CONNECTION is required on connection c2 for user b
 --- revoke access connection from c , thne user c can not drop/use connection c1,3 ---
-Error: APIError: QueryFailed: [4000]invalid input parameter (fail to get connection_name c1: PermissionDenied. Code: 1063, Text = Permission denied: privilege AccessConnection is required on connection c1 for user 'c'@'%'.
-
-
-)
-Error: APIError: QueryFailed: [4000]invalid input parameter (fail to get connection_name c3: PermissionDenied. Code: 1063, Text = Permission denied: privilege AccessConnection is required on connection c3 for user 'c'@'%'.
-
-
-)
+1
+1
 Error: APIError: QueryFailed: [1063]Permission denied: privilege ACCESS CONNECTION is required on connection c1 for user c
 Error: APIError: QueryFailed: [1063]Permission denied: privilege ACCESS CONNECTION is required on connection c3 for user c
 Error: APIError: QueryFailed: [1063]Permission denied: privilege [AccessConnection] is required on CONNECTION c1 for user 'c'@'%' with roles [public,role2]. Note: Please ensure that your current role have the appropriate permissions to create a new Warehouse|Database|Table|UDF|Stage|Connection.
 Error: APIError: QueryFailed: [1063]Permission denied: privilege [AccessConnection] is required on CONNECTION c3 for user 'c'@'%' with roles [public,role2]. Note: Please ensure that your current role have the appropriate permissions to create a new Warehouse|Database|Table|UDF|Stage|Connection.
 --- user b can drop/use connection c1,3 ---
-Error: APIError: QueryFailed: [4000]invalid input parameter (fail to get connection_name c1: PermissionDenied. Code: 1063, Text = Permission denied: privilege AccessConnection is required on connection c1 for user 'c'@'%'.
-
-
-)
-Error: APIError: QueryFailed: [4000]invalid input parameter (fail to get connection_name c3: PermissionDenied. Code: 1063, Text = Permission denied: privilege AccessConnection is required on connection c3 for user 'c'@'%'.
-
-
-)
+invalid input parameter (protocol from connection_name=c1 (azblob) not match with uri protocol (s3).)
+Permission denied: privilege [Super] is required on *.* for user 'b'@'%' with roles [role1]. Note: Please ensure that your current role have the appropriate permissions to create a new Warehouse|Database|Table|UDF|Stage|Connection.
 OWNERSHIP	c1	NULL	ROLE	role1	
 OWNERSHIP	c3	NULL	ROLE	role1	
 CREATE CONNECTION	*.*	NULL	ROLE	role1	GRANT CREATE CONNECTION ON *.* TO ROLE `role1`
 OWNERSHIP	c3	NULL	ROLE	role1	GRANT OWNERSHIP ON CONNECTION c3 TO ROLE `role1`
 --- user c can drop/use connection c2 ---
-Error: APIError: QueryFailed: [1063]Permission denied: privilege [Super] is required on *.* for user 'c'@'%' with roles [public]. Note: Please ensure that your current role have the appropriate permissions to create a new Warehouse|Database|Table|UDF|Stage|Connection.
+Permission denied: privilege [Super] is required on *.* for user 'c'@'%' with roles [public]. Note: Please ensure that your current role have the appropriate permissions to create a new Warehouse|Database|Table|UDF|Stage|Connection.
 OWNERSHIP	c2	NULL	ROLE	role2	GRANT OWNERSHIP ON CONNECTION c2 TO ROLE `role2`
 OWNERSHIP	c2	NULL	ROLE	role2	

tests/suites/0_stateless/18_rbac/18_0015_connection_rbac.sh

@@ -8,7 +8,6 @@ export USER_A_CONNECT="bendsql --user=a --password=123 --host=${QUERY_MYSQL_HAND
 export USER_B_CONNECT="bendsql --user=b --password=123 --host=${QUERY_MYSQL_HANDLER_HOST} --port ${QUERY_HTTP_HANDLER_PORT}"
 export USER_C_CONNECT="bendsql --user=c --password=123 --host=${QUERY_MYSQL_HANDLER_HOST} --port ${QUERY_HTTP_HANDLER_PORT}"
 
-
 echo "=== OLD LOGIC: user has super privileges can operator all connections with enable_experimental_connection_privilege_check=0 ==="
 echo "=== TEST USER A WITH SUPER PRIVILEGES ==="
 echo "set global enable_experimental_connection_privilege_check=0;" | $BENDSQL_CLIENT_CONNECT
@@ -98,30 +97,30 @@ echo "show connections;" | $USER_C_CONNECT
 
 echo "--- user b can not drop connection c2 ---"
 echo "drop connection if exists c2;" | $USER_B_CONNECT
-echo "CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c2');" | $USER_B_CONNECT
+curl -s -u "b:123" -XPOST "http://$QUERY_MYSQL_HANDLER_HOST:$QUERY_HTTP_HANDLER_PORT/v1/query" -H 'Content-Type: application/json' -d "{\"sql\": \"CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c2')\"}" | jq -r '.error.message' |grep 'Permission denied: privilege AccessConnection' |wc -l
 echo "show grants on connection c2;" | $USER_B_CONNECT
 
 echo "--- revoke access connection from c , thne user c can not drop/use connection c1,3 ---"
 echo "revoke access connection on connection c1 from c;" | $BENDSQL_CLIENT_CONNECT
 echo "revoke access connection on connection c3 from c;" | $BENDSQL_CLIENT_CONNECT
-echo "CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c1');" | $USER_C_CONNECT
-echo "CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c3');" | $USER_C_CONNECT
+curl -s -u "c:123" -XPOST "http://$QUERY_MYSQL_HANDLER_HOST:$QUERY_HTTP_HANDLER_PORT/v1/query" -H 'Content-Type: application/json' -d "{\"sql\": \"CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c1');\"}" | jq -r '.error.message' |grep 'Permission denied: privilege AccessConnection' |wc -l
+curl -s -u "c:123" -XPOST "http://$QUERY_MYSQL_HANDLER_HOST:$QUERY_HTTP_HANDLER_PORT/v1/query" -H 'Content-Type: application/json' -d "{\"sql\": \"CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c3')\"}" | jq -r '.error.message' |grep 'Permission denied: privilege AccessConnection' |wc -l
 echo "show grants on connection c1;" | $USER_C_CONNECT
 echo "show grants on connection c3;" | $USER_C_CONNECT
 echo "drop connection if exists c1;" | $USER_C_CONNECT
 echo "drop connection if exists c3;" | $USER_C_CONNECT
 
 echo "--- user b can drop/use connection c1,3 ---"
-echo "CREATE STAGE c1 URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c1');" | $USER_C_CONNECT
-echo "CREATE STAGE c3 URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c3');" | $USER_C_CONNECT
+curl -s -u "b:123" -XPOST "http://$QUERY_MYSQL_HANDLER_HOST:$QUERY_HTTP_HANDLER_PORT/v1/query" -H 'Content-Type: application/json' -d "{\"sql\": \"CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c1');\"}" | jq -r '.error.message'
+curl -s -u "b:123" -XPOST "http://$QUERY_MYSQL_HANDLER_HOST:$QUERY_HTTP_HANDLER_PORT/v1/query" -H 'Content-Type: application/json' -d "{\"sql\": \"CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c3')\"}" | jq -r '.error.message'
 echo "show grants on connection c1;" | $USER_B_CONNECT
 echo "show grants on connection c3;" | $USER_B_CONNECT
 echo "drop connection if exists c1;" | $USER_B_CONNECT
 echo "show grants for role role1;" | $USER_B_CONNECT
 echo "drop connection if exists c3;" | $USER_B_CONNECT
 
 echo "--- user c can drop/use connection c2 ---"
-echo "CREATE STAGE c2 URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c2');" | $USER_C_CONNECT
+curl -s -u "c:123" -XPOST "http://$QUERY_MYSQL_HANDLER_HOST:$QUERY_HTTP_HANDLER_PORT/v1/query" -H 'Content-Type: application/json' -d "{\"sql\": \"CREATE STAGE my_s3_stage URL = 's3://databend-toronto' CONNECTION = (CONNECTION_NAME = 'c2')\"}" | jq -r '.error.message'
 echo "show grants for role role2;" | $USER_C_CONNECT
 echo "show grants on connection c2;" | $USER_C_CONNECT
 echo "drop connection if exists c2;" | $USER_C_CONNECT