Some query commands access the catalog directly. As part of the project, we aim at centralise every catalog access via shard role api to prevent misuse and simplify maintenance. 

However, during authorization checks many operations done under an acquisition make no sense as they are usually executed too early in the stack. 
As part of ticket, remove those direct access and extend the shard role api to provide an equivalent logic. 

eg:

• Distinct
• Find
• count