[feature] add monitor execution & execute tasks privileges (#213)

pkg/resources/account_grant.go

@@ -15,6 +15,8 @@ var validAccountPrivileges = newPrivilegeSet(
 	privilegeCreateIntegration,
 	privilegeManageGrants,
 	privilegeMonitorUsage,
+	privilegeMonitorExecution,
+	privilegeExecuteTask,
 )
 
 var accountGrantSchema = map[string]*schema.Schema{

pkg/resources/account_grant_test.go

@@ -57,6 +57,40 @@ func TestAccountGrantRead(t *testing.T) {
 	})
 }
 
+func TestMonitorExecution(t *testing.T) {
+	r := require.New(t)
+
+	d := accountGrant(t, "ACCOUNT|||MONITOR EXECUTION", map[string]interface{}{
+		"privilege": "MONITOR EXECUTION",
+		"roles":     []interface{}{"test-role-1", "test-role-2"},
+	})
+
+	r.NotNil(d)
+
+	WithMockDb(t, func(db *sql.DB, mock sqlmock.Sqlmock) {
+		expectReadAccountGrant(mock)
+		err := resources.ReadAccountGrant(d, db)
+		r.NoError(err)
+	})
+}
+
+func TestExecuteTask(t *testing.T) {
+	r := require.New(t)
+
+	d := accountGrant(t, "ACCOUNT|||EXECUTE TASK", map[string]interface{}{
+		"privilege": "EXECUTE TASK",
+		"roles":     []interface{}{"test-role-1", "test-role-2"},
+	})
+
+	r.NotNil(d)
+
+	WithMockDb(t, func(db *sql.DB, mock sqlmock.Sqlmock) {
+		expectReadAccountGrant(mock)
+		err := resources.ReadAccountGrant(d, db)
+		r.NoError(err)
+	})
+}
+
 func expectReadAccountGrant(mock sqlmock.Sqlmock) {
 	rows := sqlmock.NewRows([]string{
 		"created_on", "privilege", "granted_on", "name", "granted_to", "grantee_name", "grant_option", "granted_by",

pkg/resources/privileges.go

@@ -45,6 +45,8 @@ const (
 	privilegeCreateIntegration privilege = "CREATE INTEGRATION"
 	privilegeManageGrants      privilege = "MANAGE GRANTS"
 	privilegeMonitorUsage      privilege = "MONITOR USAGE"
+	privilegeMonitorExecution  privilege = "MONITOR EXECUTION"
+	privilegeExecuteTask       privilege = "EXECUTE TASK"
 )
 
 type privilegeSet map[privilege]struct{}