Trino integration with Ranger permission issues

[big-loser]

Hi guys：
I'm really confused by Trino's permission settings and don't understand why it's not working.
My requirement is very simple: I just want to use Ranger to control a user's full access to tables under a specific schema.

I disabled all default policies on Ranger and then created a new policy.

After observing the Trino coordinator logs, I confirmed that it has switched to the new policy version.

However, when connecting via DBeaver, I get a permission denied error. Then, through the web UI, I see that I don't have permission to execute:

SELECT TYPE_NAME, DATA_TYPE, PRECISION, LITERAL_PREFIX, LITERAL_SUFFIX,
CREATE_PARAMS, NULLABLE, CASE_SENSITIVE, SEARCHABLE, UNSIGNED_ATTRIBUTE,
FIXED_PREC_SCALE, AUTO_INCREMENT, LOCAL_TYPE_NAME, MINIMUM_SCALE, MAXIMUM_SCALE,
SQL_DATA_TYPE, SQL_DATETIME_SUB, NUM_PREC_RADIX
FROM system.jdbc.types
OR ...

SELECT version()
and some other statements. Why is this happening? I don’t understand.

How should I configure this to achieve what I need?