pub(crate) fn check_cdc_source_select_privilege( session: &SessionImpl, source: &SourceCatalog, ) -> Result<()>