1101 Commits

Author	SHA1	Message	Date
kssenii	2c485e78db	Merge remote-tracking branch 'upstream/master' into system-sync-cache	2023-08-08 16:27:21 +02:00
pufit	2f46ae850e	Merge branch 'master' into pufit/role-from-storage	2023-08-07 17:57:41 -04:00
Alexey Milovidov	93a10980e9	Fix review comments	2023-08-06 16:27:45 +02:00
Alexey Milovidov	ce2fcc8f33	Fix wording	2023-08-06 14:48:20 +02:00
flynn	9b8f87e9ac	Merge branch 'master' into concept	2023-08-05 02:41:55 +08:00
Vitaly Baranov	16dfb028b6	Remove creation of a unnecessary temporary ContextAccess on login.	2023-08-03 13:44:59 +02:00
Alexander Tokmakov	7684e68008	Add system stop pulling replication log (#52881) ... * add system stop pulling replication log * add const * fix another stupid test * Update test.py	2023-08-03 13:34:43 +03:00
Kseniia Sumarokova	0ec11a2d79	Merge branch 'master' into system-sync-cache	2023-08-03 12:02:18 +02:00
Aleksei Filatov	4734d416a5	Add settings and processing code	2023-08-03 12:44:44 +03:00
flynn	be0c5bf10a	Use concepts to replace more std::enable_if_t ... fix	2023-08-02 07:50:25 +00:00
kssenii	5d167b4f03	Merge remote-tracking branch 'upstream/master' into system-sync-cache	2023-07-31 12:44:11 +02:00
Alexey Gerasimchuck	e58b3cfd32	Implemented max sessions for user	2023-07-30 22:09:03 +00:00
pufit	6f2404b792	Additional info in exception	2023-07-28 22:18:53 -04:00
pufit	9dbb106dc1	Fix tests, docs	2023-07-27 23:37:09 -04:00
pufit	13d9952227	add id to insertImpl	2023-07-27 00:38:51 -04:00
Nikolay Degterinsky	d89e2e6a27	Add SYSTEM STOP LISTEN query (#51016) ... Co-authored-by: Nikita Mikhaylov <nikitamikhaylov@clickhouse.com> Co-authored-by: Nikita Mikhaylov <mikhaylovnikitka@gmail.com>	2023-07-26 19:58:41 +02:00
pufit	21e12ea084	Fix tests	2023-07-26 00:53:45 -04:00
Anton Popov	347f442f84	Merge remote-tracking branch 'upstream/master' into HEAD	2023-07-24 10:55:31 +00:00
pufit	2a00e2aa6a	Implement MOVE query for the access entities.	2023-07-20 22:20:36 -04:00
Vitaly Baranov	fff1ae7369	Use default destructor for ContextAccess.	2023-07-17 17:14:00 +02:00
Vitaly Baranov	2379d8c9d5	Revert unnecessary improving in ContextAccessCache for now.	2023-07-17 15:13:41 +02:00
Vitaly Baranov	0e4b75a282	Avoid keeping lock Context::getLock() while calculating access rights when a user logs in.	2023-07-17 14:59:14 +02:00
Vitaly Baranov	018546a57d	Avoid keeping lock Context::getLock() while recalculating access rights of a connected user.	2023-07-17 14:59:14 +02:00
Mike Kot	062b1c464c	watch for certificate file updates in configreloader	2023-07-11 10:04:43 +00:00
pufit	77e45e5669	Add DROP ROLE ... FROM and CREATE ROLE ... AT syntax	2023-07-10 20:23:03 -04:00
Alexey Milovidov	933a92e176	Merge branch 'master' into remove-useless-system-query	2023-07-08 01:45:19 +02:00
Alexey Milovidov	d59f68b600	Remove useless code	2023-07-06 04:55:46 +02:00
kssenii	80dabd1346	Merge remote-tracking branch 'upstream/master' into system-sync-cache	2023-07-05 12:58:11 +02:00
Kseniia Sumarokova	dcda3576d2	Merge branch 'master' into add-separate-access-for-use-named-collections	2023-07-05 12:05:49 +02:00
kssenii	6bca452924	Fix tests	2023-07-04 12:42:27 +02:00
kssenii	ac77f5fe6f	Merge remote-tracking branch 'upstream/master' into add-separate-access-for-use-named-collections	2023-07-03 13:55:45 +02:00
Vitaly Baranov	2311dd9b5d	Use TSA_GUARDED_BY() macro in the definition of ContextAccess.	2023-06-30 15:18:54 +02:00
Vitaly Baranov	f134153f4e	Fix race with "user_was_dropped" in ContextAccess.	2023-06-30 13:13:11 +02:00
kssenii	72d1834bbd	system sync filesystem cache	2023-06-29 18:13:54 +02:00
Nikolay Degterinsky	0d2b9fd0e5	Add VALID UNTIL clause for users	2023-06-22 02:12:12 +00:00
Maksim Kita	7e5017dd31	Fixed tests	2023-06-20 11:42:22 +03:00
Alexey Milovidov	b19b87a3e5	Whitespaces	2023-06-18 20:42:27 +02:00
Nikolay Degterinsky	b963369920	Merge pull request #50865 from jmaicher/fix/50864/verification-cooldown-cache-entry ... Fix type of LDAP server params hash in cache entry	2023-06-15 16:21:44 +02:00
kssenii	05811d3dd8	Rename	2023-06-15 12:35:22 +02:00
kssenii	25ae93bbf8	Merge remote-tracking branch 'upstream/master' into add-separate-access-for-use-named-collections	2023-06-14 13:33:56 +02:00
kssenii	6c776f4483	Better	2023-06-13 12:40:53 +02:00
Julian Maicher	c378c3fcbb	Fix type of LDAP server params hash in cache entry ... In 1ed7ad57d9, we switched from (`size_t`, usually 64bit) to SipHash (128bit) and forgot to change the type of the cache entry. This broke the caching of successful LDAP authentication requests (verification cooldown). Fixes #50864	2023-06-12 10:58:35 +02:00
pufit	55d228e78e	Merge branch 'master' into support_redis	2023-06-09 11:45:12 -04:00
kssenii	63f8a3275b	Merge remote-tracking branch 'upstream/master' into add-separate-access-for-use-named-collections	2023-06-09 14:32:41 +02:00
Anton Popov	c980771c22	Merge remote-tracking branch 'upstream/master' into HEAD	2023-06-07 11:23:13 +00:00
kssenii	adfedb4df0	Add USE NAMED COLLECTION access	2023-06-06 14:46:34 +02:00
alesapin	02923138a3	Merge branch 'master' into azure	2023-06-04 16:43:28 +02:00
alesapin	8e4a2a42fb	Some code	2023-06-02 16:51:09 +02:00
JackyWoo	d594bb1c7a	fix fast tests	2023-06-02 10:05:54 +08:00
JackyWoo	e91867373c	Add table function Redis	2023-06-02 10:05:54 +08:00
pufit	dbd3766f5f	Specify roles in users.xml	2023-05-30 20:42:49 -04:00
Anton Popov	69ec65ab33	Merge remote-tracking branch 'upstream/master' into HEAD	2023-05-16 10:30:47 +00:00
Vitaly Baranov	801cacc13f	Merge pull request #49831 from vitlibar/fix-setting-null-in-profile-def ... Fix setting NULL in profile definition	2023-05-15 22:24:49 +02:00
Vitaly Baranov	bf3336a84e	Merge pull request #47640 from ilejn/row_policy_template ... Row policy for database	2023-05-15 20:05:15 +02:00
Kruglov Pavel	558eda4146	Merge pull request #49412 from azat/block-use-dense-hash-map ... Switch Block::NameMap to google::dense_hash_map over HashMap	2023-05-15 12:22:55 +02:00
Ilya Golshtein	ccd82842a0	row_policy_template - rollback tweaking found policy for database	2023-05-13 22:30:02 +00:00
Ilya Golshtein	9ef610040f	row_policy_template - table * is respected	2023-05-13 22:30:02 +00:00
Ilya Golshtein	6852ae0d93	row_policy_template - external code review changes	2023-05-13 22:30:02 +00:00
Ilya Golshtein	7fa6ea4ccc	row policy template: tests and code cleanup, code review changes	2023-05-13 22:30:02 +00:00
Ilya Golshtein	f0d21a9100	row policy template: initial, works, restrictive rules fix	2023-05-13 22:30:02 +00:00
Alexey Milovidov	5a44dc26e7	Fixes for clang-17	2023-05-13 02:57:31 +02:00
Vitaly Baranov	eb62030fa4	Fix assigning a setting to NULL in settings profile's definition.	2023-05-12 11:04:30 +02:00
Azat Khuzhin	2c40dd6a4c	Switch Block::NameMap to google::dense_hash_map over HashMap ... Since HashMap creates 2^8 elements by default, while dense_hash_map should be good here. Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>	2023-05-12 05:52:57 +02:00
Vitaly Baranov	ec011b9113	Merge branch 'master' into user-grants-from-config	2023-05-11 17:08:06 +02:00
Han Fei	64b67b9a37	Merge branch 'master' into hanfei/fiu	2023-05-09 01:14:30 +02:00
Han Fei	80692caa4c	Update src/Access/Common/AccessType.h ... Co-authored-by: Sergei Trifonov <svtrifonov@gmail.com>	2023-05-08 19:33:53 +02:00
pufit	04a829b554	Fix PR issues	2023-05-05 22:41:44 -04:00
pufit	309032fb67	Check if grantees are empty	2023-05-04 13:42:14 -04:00
alesapin	89caf40840	Merge pull request #46528 from myrrc/feature/show-secrets-option ... Show secrets in `SHOW` and `SELECT` queries	2023-05-04 11:21:30 +02:00
Nikolay Degterinsky	46c86dce93	Fix bcrypt enum value	2023-05-02 14:36:48 +00:00
pufit	2964ca5c84	Specify grants for users in users.xml	2023-05-01 20:24:02 -04:00
Han Fei	4d18a4f8d3	Merge branch 'master' into hanfei/fiu	2023-05-01 17:51:41 +02:00
Han Fei	b701293d46	support named fault injection and add a simple test	2023-05-01 17:44:37 +02:00
Nikolay Degterinsky	ea8c8ef559	Fix test	2023-04-29 21:53:47 +00:00
Mike Kot	2d20658885	Merge branch 'master' into feature/show-secrets-option	2023-04-28 20:19:35 +03:00
Nikolay Degterinsky	54c8f63a33	Fixes	2023-04-28 15:12:06 +00:00
Mike Kot	7bffa89e96	add all 3 settings	2023-04-28 13:22:36 +00:00
Mike Kot	357cde95e9	Merge branch 'master' into feature/show-secrets-option	2023-04-27 20:19:40 +00:00
Nikolay Degterinsky	df1e56b985	Merge remote-tracking branch 'upstream/master' into bcrypt	2023-04-27 17:01:58 +00:00
Anton Popov	125e5c50b8	allow to flush async insert queue	2023-04-25 21:30:03 +00:00
Nikolay Degterinsky	2fe3a69ba1	Merge remote-tracking branch 'upstream/master' into add_default_password_type	2023-04-24 18:51:32 +00:00
Nikolay Degterinsky	12ad5b710a	Separate AuthenticationData and AuthenticationType, small fixes	2023-04-24 15:12:45 +00:00
Nikolay Degterinsky	b599d0bd01	Better	2023-04-21 22:03:56 +00:00
Alexey Milovidov	530b764953	Fix IBM	2023-04-21 12:38:45 +02:00
Nikolay Degterinsky	dbc620f7e2	Fix style	2023-04-10 02:59:42 +00:00
Nikolay Degterinsky	7957752128	Merge remote-tracking branch 'upstream/master' into add_default_password_type	2023-04-10 02:25:46 +00:00
Nikolay Degterinsky	64dc60a8d1	Better version, introduce ASTAuthenticationData	2023-04-10 02:20:57 +00:00
Azat Khuzhin	011480924a	Use forward declaration of ThreadPool ... Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>	2023-04-07 11:25:35 +02:00
xiedeyantu	5a18e0d5a5	support undrop table	2023-03-27 22:16:36 +08:00
Vitaly Baranov	1badc3cba0	Move information about current hosts and list of all hosts to BackupCoordination (#47971) ... to simplify the code and help implementing other features. Co-authored-by: Nikita Mikhaylov <mikhaylovnikitka@gmail.com>	2023-03-24 17:38:19 +01:00
Vitaly Baranov	f49cab91c0	Merge pull request #47002 from ilejn/orphaned_role ... Tests for orphaned role fix	2023-03-23 14:09:34 +01:00
Ilya Golshtein	5091b4e224	orphaned role - expiration_time => expiration_time_seconds	2023-03-21 08:44:08 +01:00
Ilya Golshtein	3f51101ad4	orphaned role - must initialize role cache for e.g clickhouse-local	2023-03-20 23:21:25 +01:00
Ilya Golshtein	e1d1ead941	orphaned role - tests only	2023-03-20 23:21:25 +01:00
kssenii	75624c52f7	Merge remote-tracking branch 'upstream/master' into named-collections-granular-access	2023-03-20 16:38:14 +01:00
Alexander Tokmakov	a72f0cae07	Merge pull request #46071 from arenadata/ADQM-639 ... Add support of arbitrary engines for temporary tables	2023-03-16 20:56:25 +03:00
Roman Vasin	46d683fbf6	Apply patch to fix grants hierarchy	2023-03-16 08:17:33 +00:00
Vitaly Baranov	1cf1ce07fe	Use server-side copy during restore from S3 to S3.	2023-03-13 23:50:13 +01:00
Roman Vasin	36c639ed2f	Fix grants hierarchy for temporary tables and comment about default engine	2023-03-13 16:39:15 +00:00
Roman Vasin	f42f3ee655	Merge branch 'master' into ADQM-639	2023-03-09 09:48:33 +03:00
Vitaly Baranov	31b7e6edc6	Keep subscriptions for all enabled roles.	2023-03-08 07:50:04 +01:00
Vitaly Baranov	9792b93a11	Fix changing a role which is already expired in RoleCache.	2023-03-07 21:22:22 +01:00
Mike Kot	1fca58b694	Merge branch 'master' into feature/show-secrets-option	2023-03-06 15:46:54 +03:00
Roman Vasin	95a7e11a47	Merge branch 'master' of github.com:ClickHouse/ClickHouse into ADQM-639	2023-03-06 09:11:20 +00:00
Roman Vasin	b5bb2eb3dc	Add new grant CREATE ARBITRARY TEMPORARY TABLE	2023-03-06 07:20:05 +00:00
kssenii	0fa3fb3592	Fix show grants for user which has all grants	2023-03-03 14:04:32 +01:00
kssenii	0c4bb3c80f	Merge remote-tracking branch 'upstream/master' into named-collections-granular-access	2023-03-02 19:08:29 +01:00
Robert Schulze	35f4b42608	Move likePatternToRegexp from Functions/ to Common/	2023-02-27 16:41:15 +00:00
Mike Kot	c799bd094b	Merge branch 'master' into feature/show-secrets-option	2023-02-27 18:43:14 +03:00
kssenii	03c9eeb106	Fix tests	2023-02-27 14:29:20 +01:00
Mike Kot	62acc7a6cf	setting and some docs	2023-02-27 13:18:21 +00:00
kssenii	a2f9ac88d9	Fix unit test	2023-02-27 13:00:54 +01:00
kssenii	536446d526	Remove debug logs	2023-02-24 18:09:00 +01:00
kssenii	d55fed77e3	Fix	2023-02-24 18:02:31 +01:00
kssenii	6224ca9cd6	Fix	2023-02-24 17:08:05 +01:00
kssenii	357ffcb61f	More review fixes	2023-02-24 16:53:16 +01:00
kssenii	f2a9109fe1	Merge remote-tracking branch 'upstream/master' into named-collections-granular-access	2023-02-24 15:20:46 +01:00
kssenii	0555ca2724	Review fixes	2023-02-24 14:44:47 +01:00
kssenii	f0ca3ef207	Merge remote-tracking branch 'upstream/master' into named-collections-granular-access	2023-02-22 14:02:29 +01:00
kssenii	9a7c71b78e	Allow to hide only values from system.named_collections	2023-02-21 18:07:57 +01:00
Alexey Milovidov	d8cda3dbb8	Remove PVS-Studio	2023-02-19 23:30:05 +01:00
kssenii	c6b371ddea	Better	2023-02-15 18:32:00 +01:00
kssenii	0c53f33e6f	Make code more common: add GlobalWithParameter level	2023-02-15 16:59:43 +01:00
Nikolay Degterinsky	3075656e1d	Merge remote-tracking branch 'upstream/master' into HEAD	2023-02-15 10:06:44 +00:00
kssenii	33572f9acd	Better	2023-02-14 19:50:27 +01:00
kssenii	c79f252a56	Fix test	2023-02-11 12:14:37 +01:00
kssenii	78c809608c	Fix	2023-02-10 23:45:53 +01:00
kssenii	6f985b8ae0	Fix unit test, cleanup code	2023-02-10 18:49:18 +01:00
kssenii	c13b0b8a06	Fix tests	2023-02-10 14:39:09 +01:00
kssenii	214ffe0bb0	Remove unused code	2023-02-09 17:44:26 +01:00
kssenii	9e04e57949	Allow to give access only to certain named collections	2023-02-09 17:22:57 +01:00
Antonio Andelic	f96d480563	Merge branch 'master' into add-support-for-settings-alias	2023-02-09 16:07:45 +01:00
Kseniia Sumarokova	a5d3b00699	Merge pull request #46010 from kssenii/named-collections-fix-access ... Fix named collections access	2023-02-07 23:20:22 +01:00
Antonio Andelic	3c2fafe07e	Use correct name resolution	2023-02-06 09:12:03 +00:00
Antonio Andelic	7c8a25a18e	Correctly use merge tree setting constraints	2023-02-06 08:30:09 +00:00
Antonio Andelic	8929838fcc	Merge branch 'master' into add-support-for-settings-alias	2023-02-03 17:47:00 +00:00
Antonio Andelic	8a28279065	Better constraint resolution	2023-02-03 17:34:05 +00:00
Antonio Andelic	d5117f2aa6	Define S3 client with bucket and endpoint resolution (#45783) ... * Update aws * Define S3 client with bucket and endpoint resolution * Add defines for ErrorCodes * Use S3Client everywhere * Remove unused errorcode * Add DROP S3 CLIENT CACHE query * Add a comment * Fix style * Update aws * Update reference files * Add missing include * Fix unit test * Remove unneeded declarations * Correctly use RetryStrategy * Rename S3Client to Client * Fix retry count * fix clang-tidy warnings	2023-02-03 14:30:52 +01:00
kssenii	486c10bde1	Fix named collections access	2023-02-03 13:18:54 +01:00
Antonio Andelic	f613bfd8d2	Merge branch 'master' into add-support-for-settings-alias	2023-02-02 11:15:39 +00:00
Antonio Andelic	ec04cf6876	Merge branch 'master' into add-support-for-settings-alias	2023-02-01 09:01:01 +00:00
Robert Schulze	325c6bdf3d	Renaming: "Query Result Cache" --> "Query Cache" ... Reasons: - The cache will at some point store intermediate results as opposed to only query results. We should change the terminology now without having to worry about backward compat. - Equivalent caches in MySQL (1) and Starrocks (2) are called "query cache". - The new name is ca. 13.8% more catchy. (1) https://dev.mysql.com/doc/refman/5.6/en/query-cache.html (2) https://docs.starrocks.io/en-us/2.5/using_starrocks/query_cache	2023-01-31 09:54:34 +00:00
freedomDR	5836a3f153	refactor coder	2023-01-28 04:27:11 +00:00
freedomDR	379850b6c4	add system sync file cache	2023-01-28 04:27:10 +00:00
Antonio Andelic	defc9108f0	Extend support for aliases to constraints and profiles	2023-01-27 09:39:10 +00:00
Alexander Tokmakov	3744fa2c63	format more messages	2023-01-25 21:16:42 +01:00
Alexander Tokmakov	9d13ca4a16	fix	2023-01-24 01:49:16 +01:00
Alexander Tokmakov	414693feb2	fixes	2023-01-24 00:46:03 +01:00
Alexander Tokmakov	3f6594f4c6	forbid old ctor of Exception	2023-01-23 22:18:05 +01:00
Alexander Tokmakov	70d1adfe4b	Better formatting for exception messages (#45449) ... * save format string for NetException * format exceptions * format exceptions 2 * format exceptions 3 * format exceptions 4 * format exceptions 5 * format exceptions 6 * fix * format exceptions 7 * format exceptions 8 * Update MergeTreeIndexGin.cpp * Update AggregateFunctionMap.cpp * Update AggregateFunctionMap.cpp * fix	2023-01-24 00:13:58 +03:00
Robert Schulze	340f406553	Merge branch 'master' into query-result-cache	2023-01-22 13:21:36 +01:00
Robert Schulze	4f90824347	Merge remote-tracking branch 'origin/master' into query-result-cache	2023-01-17 22:49:53 +00:00
Alexander Tokmakov	5cd90c1a3e	Merge branch 'master' into exception_message_patterns	2023-01-17 20:04:04 +01:00
Alexander Tokmakov	72e8615bec	formatting of some exception messages	2023-01-17 20:03:56 +01:00
Nikolay Degterinsky	d414d4aa7a	Merge remote-tracking branch 'upstream/master' into bcrypt	2023-01-16 22:14:03 +00:00
Nikolay Degterinsky	09558003c2	Make workfactor changeable	2023-01-16 22:11:15 +00:00
Anton Popov	6863cd152f	Merge pull request #42181 from CurtizJ/optimize-loading-parts ... Do not load inactive parts at startup	2023-01-16 14:38:50 +01:00
Robert Schulze	099e30ef2a	Merge remote-tracking branch 'origin/master' into query-result-cache	2023-01-16 08:04:49 +00:00
Yakov Olkhovskiy	842a34666c	Merge pull request #44594 from arenadata/ADQM-634 ... Add keytab parameter in kerberos section of config.xml	2023-01-12 15:07:45 -05:00
Anton Popov	6c4f53bdca	Merge remote-tracking branch 'upstream/master' into HEAD	2023-01-11 01:00:57 +00:00
Robert Schulze	0c3b034887	Merge remote-tracking branch 'origin/master' into query-result-cache	2023-01-10 09:02:41 +00:00
Roman Vasin	2995c6d866	Merge branch 'master' of github.com:ClickHouse/ClickHouse into ADQM-634	2023-01-09 08:26:45 +00:00
Alexey Milovidov	d331f0ce82	Fix buffer overflow in parser	2023-01-09 03:31:12 +01:00
Robert Schulze	45dbcf88e5	Merge remote-tracking branch 'origin/master' into query-result-cache	2023-01-06 20:42:48 +00:00
Anton Popov	ed00399eb6	Merge remote-tracking branch 'upstream/master' into HEAD	2023-01-05 14:12:02 +00:00
Nikolay Degterinsky	aa52956412	Add bcrypt authentification type	2023-01-04 15:33:16 +00:00
Robert Schulze	e9e04166d9	Merge remote-tracking branch 'origin/master' into query-result-cache	2023-01-02 08:20:27 +00:00
Nikolay Degterinsky	9146dd3636	Fix build	2022-12-29 01:17:14 +00:00
Nikolay Degterinsky	e814179663	Add default password type	2022-12-28 13:26:23 +00:00
Roman Vasin	483e26cf2f	Merge branch 'master' into ADQM-634	2022-12-26 15:34:38 +03:00
Yakov Olkhovskiy	ce533af162	remove unnecessary includes	2022-12-23 19:29:51 +00:00
Yakov Olkhovskiy	a166dde9c4	add member function getLastForwardedFor to ClientInfo	2022-12-23 18:32:29 +00:00
Anton Popov	0722020cae	Merge remote-tracking branch 'upstream/master' into HEAD	2022-12-23 18:15:55 +00:00
Roman Vasin	2d9f3c242b	Add test_bad_path_to_keytab test	2022-12-22 08:07:16 +00:00
Yakov Olkhovskiy	8462b724ca	Merge branch 'master' into feature-protocol-proxy	2022-12-20 13:12:07 -05:00
Yakov Olkhovskiy	9092134544	auth_use_forwarded_address config setting added, using forwarded address for proxied TCP and HTTP connection, likely bug is fixed in AccessControl, relevant test is appended	2022-12-20 17:39:40 +00:00
Konstantin Bogdanov	bb03efac38	Lint	2022-12-20 03:43:53 +01:00
Konstantin Bogdanov	f612cbe1c3	Only use constraints for SettingsConstraints	2022-12-20 03:15:32 +01:00
Roman Vasin	616efdd336	Move keytab init into GSSAcceptorContext::initHandles()	2022-12-19 15:28:15 +00:00
Robert Schulze	b93c56323c	Merge remote-tracking branch 'origin/master' into query-result-cache	2022-12-19 09:18:36 +00:00
Robert Schulze	537c64aad2	Merge remote-tracking branch 'origin/master' into query-result-cache ... Conflicts: - tests/queries/0_stateless/02117_show_create_table_system.reference	2022-12-15 12:17:58 +00:00
Anton Popov	3008e701ea	fix tests	2022-12-14 01:36:03 +00:00
Nikolay Degterinsky	809f15ac81	Merge branch 'master' into fix_settings_constraints	2022-12-13 20:33:16 +01:00
Nikolay Degterinsky	443bc3e656	Merge pull request #43719 from evillique/password_complexity_rules ... Add password complexity rules	2022-12-13 17:56:45 +01:00
Nikolay Degterinsky	034269087f	Fix tests	2022-12-13 09:16:23 +00:00
Anton Popov	0b396bab14	Merge remote-tracking branch 'upstream/master' into HEAD	2022-12-12 18:08:27 +00:00
Anton Popov	a2fee110b8	add query for waiting of loading parts and fix test_transactions	2022-12-12 14:33:42 +00:00
Nikolay Degterinsky	e0defffcb4	Fix build	2022-12-12 13:47:06 +00:00
Robert Schulze	b78652e138	Query result cache	2022-12-12 10:37:10 +00:00
Nikolay Degterinsky	19e95e8cd8	Better implementation of password rules	2022-12-11 23:59:04 +00:00
Nikolay Degterinsky	f2c07c0337	Merge remote-tracking branch 'upstream/master' into password_complexity_rules	2022-12-10 00:46:05 +00:00
Roman Vasin	9c70b13702	Add #if USE_KRB5	2022-12-09 12:33:05 +00:00
Roman Vasin	165e39085b	Set keytab by call of krb5_gss_register_acceptor_identity()	2022-12-09 12:25:55 +00:00
Sergei Trifonov	bae1519970	Merge branch 'master' into merge_tree_settings_constraints	2022-12-08 22:25:16 +01:00
serxa	fed665c0ea	fix tidy build	2022-12-08 21:24:38 +00:00
Alexey Milovidov	9c81fd7afc	Merge pull request #43517 from ClickHouse/password-reset-message ... Move password reset message from client to server	2022-12-07 23:26:58 +03:00
serxa	db50ce0634	refactoring	2022-12-07 16:08:33 +00:00
serxa	9ccfda73ae	fixes after review	2022-12-07 13:07:28 +00:00
Nikolay Degterinsky	bb9fdc0839	Fix CREATE query constraints	2022-12-07 00:53:27 +00:00
serxa	1b5b43ec87	fix checks on CREATE + added resolveSetting.h + improved system table	2022-12-06 19:09:18 +00:00
serxa	e908e49dd9	review fixes	2022-12-05 11:02:37 +00:00
kssenii	dca3444283	Merge remote-tracking branch 'upstream/master' into named-collections-sql-commands	2022-12-04 15:56:02 +01:00
serxa	006af1b6a4	constraints on merge tree settings	2022-12-02 19:30:14 +00:00
Vasily Nemkov	aff3e283e6	Update SettingsProfilesInfo.h	2022-11-28 16:06:56 +04:00
Vasily Nemkov	cdc9e5e5fb	Fixed accessing invalid iterator	2022-11-28 16:06:11 +04:00
Alexey Milovidov	114d77d8e8	Revert "Update AccessControl.cpp" ... This reverts commit ae335e9c22.	2022-11-26 02:42:14 +01:00
Nikolay Degterinsky	3fd10e0011	Better solution	2022-11-25 22:38:28 +00:00
Nikolay Degterinsky	6825d85daa	Add complexity rules for passwords	2022-11-25 22:38:05 +00:00
Alexey Milovidov	d45e49ead5	Merge branch 'password-reset-message' of github.com:ClickHouse/ClickHouse into password-reset-message	2022-11-25 23:05:03 +01:00
Alexey Milovidov	f0a3196fa8	xMerge branch 'master' into password-reset-message	2022-11-25 22:26:23 +01:00
Vasily Nemkov	d7fc4fee5e	Update SettingsProfilesInfo.cpp	2022-11-23 22:07:11 +04:00
Vasily Nemkov	ccfe0e26b4	Merge branch 'master' into fix_profile_names_mismatch	2022-11-23 21:49:46 +04:00
Vasily Nemkov	246c6ff320	Cleanup	2022-11-23 17:29:38 +04:00
Vasily Nemkov	aa78f1c842	Made sure SettingsProfilesInfo::profiles is a subset of SettingsProfilesInfo::profiles_with_implicit ... That means SettingsProfilesInfo::profiles now: - has default_profile_id (if enabled) - doesn't have profiles that are not matching for current user/roles	2022-11-23 17:29:38 +04:00
kssenii	6044a9257c	Merge remote-tracking branch 'upstream/master' into named-collections-sql-commands	2022-11-23 12:00:55 +01:00
Alexey Milovidov	8cb34913a1	Merge pull request #42461 from Enmk/ldap_fix_search_limit ... fix LDAP in case of many roles on user	2022-11-22 20:05:14 +01:00
Alexey Milovidov	ae335e9c22	Update AccessControl.cpp	2022-11-22 21:58:30 +03:00
Alexey Milovidov	c816ed4f0e	Move password reset message from client to server	2022-11-22 19:36:52 +01:00
Alexey Milovidov	c20dbb7770	Move password reset message from client to server	2022-11-22 19:34:38 +01:00
kssenii	ae25a90f09	Fix show access command	2022-11-19 13:21:35 +01:00
kssenii	98f5cc10bb	Merge remote-tracking branch 'upstream/master' into named-collections-access-fix	2022-11-18 19:51:28 +01:00
kssenii	5323c51176	Restrict access to system.named_collections	2022-11-17 13:40:03 +01:00
kssenii	f0ce28349d	Better	2022-11-16 17:58:21 +01:00
Alexey Milovidov	923f2dd562	Merge branch 'master' into ldap_fix_search_limit	2022-11-16 06:13:07 +01:00
kssenii	234f6ee54d	Add commands CREATE/ALTER/DROP NAMED COLLECTION	2022-11-15 15:51:56 +01:00
Vitaly Baranov	21e7d843da	Merge pull request #43097 from vitlibar/correct-error-message-after-dropping-current-user ... Make error message after dropping current user more correct.	2022-11-14 21:13:58 +01:00
Kseniia Sumarokova	79206c6eb0	Merge pull request #43147 from kssenii/named-collections-refactoring ... Add generic implementation for arbitrary structured named collections, access type and system.named_collections	2022-11-14 11:57:17 +01:00
Maksim Kita	e220906c9e	Analyzer added identifier typo corrections	2022-11-10 19:21:51 +01:00
kssenii	bed7ac9442	Support arbitrary structure collections	2022-11-10 17:05:24 +01:00
Vitaly Baranov	6bc8b544ce	Merge branch 'master' into correct-error-message-after-dropping-current-user	2022-11-10 13:36:52 +01:00
Vitaly Baranov	675507594a	Make error message after dropping current user more correct.	2022-11-09 21:01:05 +01:00
Vasily Nemkov	c16c06eaba	Removed declaration of unused LOGICAL_ERROR	2022-11-02 20:28:40 +04:00
Vasily Nemkov	e95d2c30e9	Removed debug code	2022-11-02 18:52:38 +04:00
Vasily Nemkov	c994dabb75	Fixed build on CI/CD ... Making type conversions for search_limit explicit	2022-11-02 17:40:40 +04:00
Vladimir Chebotaryov	d17b7387f9	Reworked changes to std::shared_ptr<const RowPolicyFilter>.	2022-10-27 10:42:55 +03:00
Vladimir Chebotaryov	c28e439c33	Review fixes.	2022-10-27 10:42:22 +03:00
Vladimir Chebotaryov	4cabe1f57c	Added applied row-level policies to system.query_log.	2022-10-27 10:41:47 +03:00
Vasily Nemkov	c569adfaf6	Minor fixes: typo and missing forward declaration	2022-10-25 13:42:54 +04:00
Vasily Nemkov	659a097631	Fixed SettingsProfilesInfo::getProfileNames() throwing std::exception ... - Using profiles_with_implicit for profile IDs, since it seems to be better synchronized with names - Trying harder: attempting to get name from AccessControl if it is missing from local cached names - Throwing Exception if everything else fails	2022-10-25 09:35:10 +04:00
Alexey Milovidov	98f5f27947	Merge branch 'master' into ldap_fix_search_limit	2022-10-24 10:44:45 +02:00
Azat Khuzhin	4e76629aaf	Fixes for -Wshorten-64-to-32 ... - lots of static_cast - add safe_cast - types adjustments - config - IStorage::read/watch - ... - some TODO's (to convert types in future) P.S. That was quite a journey... v2: fixes after rebase v3: fix conflicts after #42308 merged Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>	2022-10-21 13:25:19 +02:00
Vasily Nemkov	05cde705b0	Addressed issues mentioned in PR ... Stronger hashing for LDAP parameters Fixed SipHash double finalize() Simplified checks on search_limit	2022-10-20 16:38:41 +04:00
Alexey Milovidov	1fd6a56845	Update LDAPClient.h	2022-10-20 16:38:40 +04:00
Alexey Milovidov	08c1e8dc2d	Update ExternalAuthenticators.cpp	2022-10-20 16:38:39 +04:00
Vasily Nemkov	1ed7ad57d9	fix LDAP in case of many roles on user ... - Raised default value of search_limit to 256 - Added option to change that to arbitrary value - using SipHash for computing hash of LDAP server parameters - other minor changes	2022-10-20 16:38:38 +04:00
Alexander Tokmakov	4175f8cde6	abort instead of __builtin_unreachable in debug builds	2022-10-07 21:49:08 +02:00
Robert Schulze	fd86829824	Consolidate config_core.h into config.h ... Less duplication, less confusion ...	2022-09-28 13:31:57 +00:00
Nikolay Degterinsky	a7f3c7086c	Merge pull request #41341 from evillique/mandatory-identification ... Add a setting requiring no_password to be explicitly specified when creating a user	2022-09-22 15:19:43 +02:00
Nikolay Degterinsky	7292d47923	Merge branch 'master' into mandatory-identification	2022-09-21 12:18:17 +02:00
kssenii	b8079e4577	Merge remote-tracking branch 'upstream/master' into rename-some-cache-commands	2022-09-20 13:02:18 +02:00