ENG-6388 split adhoc permission into sql and sqlread

Yes, ADHOC is just kept for backward-compatibility. Functionally speaking SQL is the same as ADHOC. SQLREAD is new and only allows the user to execute read-only SQL statements.