ENG-6388 split adhoc permission into sql and sqlread

Is `null` not appropriate here? It seems like this path shouldn't care about user.