chore(query): log the access denied query to log file

Author: BohuTANG

src/query/service/src/interpreters/interpreter_factory.rs

@@ -17,6 +17,7 @@ use std::sync::Arc;
 use common_exception::ErrorCode;
 use common_exception::Result;
 use common_legacy_planners::PlanNode;
+use tracing::error;
 
 use crate::interpreters::access::Accessor;
 use crate::interpreters::DeleteInterpreter;
@@ -38,7 +39,9 @@ impl InterpreterFactory {
     pub fn get(ctx: Arc<QueryContext>, plan: PlanNode) -> Result<Arc<dyn Interpreter>> {
         // Check the access permission.
         let access_checker = Accessor::create(ctx.clone());
-        access_checker.check(&plan)?;
+        access_checker
+            .check(&plan)
+            .map(|e| error!("Access.denied(v1): {:?}", e))?;
 
         let inner = Self::create_interpreter(ctx.clone(), &plan)?;
         let query_kind = plan.name().to_string();

src/query/service/src/interpreters/interpreter_factory_v2.rs

@@ -15,6 +15,7 @@
 use std::sync::Arc;
 
 use common_exception::Result;
+use tracing::error;
 
 use super::interpreter_share_desc::DescShareInterpreter;
 use super::interpreter_user_stage_drop::DropUserStageInterpreter;
@@ -45,7 +46,9 @@ impl InterpreterFactoryV2 {
     pub fn get(ctx: Arc<QueryContext>, plan: &Plan) -> Result<InterpreterPtr> {
         // Check the access permission.
         let access_checker = Accessor::create(ctx.clone());
-        access_checker.check_new(plan)?;
+        access_checker
+            .check_new(plan)
+            .map(|e| error!("Access.denied(v2): {:?}", e))?;
 
         let inner = InterpreterFactoryV2::create_interpreter(ctx.clone(), plan)?;