fix drop table
support priv check with hive object type
no lock on new db creation
only check ownership of db for ct
ignore empty privs
fix create db rule