fix(api-gateway): data scope check (#9264)

Author: vasilev-alex

packages/cubejs-api-gateway/src/gateway.ts

@@ -385,6 +385,7 @@ class ApiGateway {
         res.setHeader('Transfer-Encoding', 'chunked');
 
         try {
+          await this.assertApiScope('data', req.context?.securityContext);
           await this.sqlServer.execSql(req.body.query, res, req.context?.securityContext);
         } catch (e: any) {
           this.handleError({