this permission is needed table by table in system catalog?  there isnt a role to apply?