[KYUUBI #5417] Authz should not check dependent subquery plan privilege

[AngersZhuuuu]

Why are the changes needed?

Fix #5417
If there is is a view with subquery, authz will still request this subquery's interval privilege, it's not we want.
For view

CREATE VIEW db.view1
AS
WITH temp AS (
    SELECT max(scope) max_scope
    FROM db1.table1)
SELECT id as new_id FROM db1.table2
WHERE scope = (SELECT max_scope FROM temp)

When we query the view

SEELCT * FROM db.view1

Before this pr, since spark will first execute subquery, it will first request [default/table1/scope] then request [default/view1/new_id]

after this pr, it only request [default/view1/new_id]

How was this patch tested?

• Add some test cases that check the changes thoroughly including negative and positive cases if possible

• Add screenshots for manual tests if appropriate

• Run test locally before make a pull request

Was this patch authored or co-authored using generative AI tooling?

No

[codecov-commenter]

Codecov Report

Merging #5418 (e2669fa) into master (1b229b6) will not change coverage.
Report is 3 commits behind head on master.
The diff coverage is 0.00%.

@@          Coverage Diff           @@
##           master   #5418   +/-   ##
======================================
  Coverage    0.00%   0.00%           
======================================
  Files         588     588           
  Lines       33423   33435   +12     
  Branches     4391    4399    +8     
======================================
- Misses      33423   33435   +12     

Files	Coverage Δ
...gin/spark/authz/util/RuleEliminateViewMarker.scala	0.00% <0.00%> (ø)
...rk/authz/ranger/RuleApplyPermanentViewMarker.scala	0.00% <0.00%> (ø)
...ubi/plugin/spark/authz/serde/tableExtractors.scala	0.00% <0.00%> (ø)

... and 1 file with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[bowenliang123]

Last year, I have done this PR #3326 for skipping shadowed source tables of the permanent view. The PermanentViewMarker was introduced with the RuleApplyPermanentViewMarker rule to get it done. Proper tests "KYUUBI #3326] check persisted view and skip shadowed table" are testing cases with permanent views.

Could you have a deep look at this and tell the difference before further implementations?

Skipping all the subqueries may be risky and not robust.

[yaooqinn]

Please fix the PR title and description according to the latest updates. Thanks.

LGTM overall.

[yaooqinn]

Thank you @AngersZhuuuu

Merged to master