6 Commits

Author	SHA1	Message	Date
jsc0218	c5dc35e5c4	try enable grant of table engine in test	2024-03-14 01:31:45 +00:00
Sergei Trifonov	7fec55eea4	work in progress	2022-09-02 04:12:05 +02:00
Vitaly Baranov	6bf7bffbeb	Correct the list of always accessible system tables.	2022-07-15 15:44:29 +02:00
Vitaly Baranov	c85b2b5732	Add option enabling that SELECT from the system database requires grant.	2022-07-15 15:44:25 +02:00
Azat Khuzhin	01e1c5345a	Add separate CLUSTER grant ... In case you have different roles for the same user on multiple clusters, ON CLUSTER query can help to overcome some limitations. Consider the following example: - cluster_with_data, dev_user (readonly=2) - stage_cluster, dev_user (readonly=0) So when you will execute the following query from stage_cluster, it will be successfully executed, since ON CLUSTER queries has different system profile: DROP DATABASE default ON CLUSTER cluster_with_data This is not 100% safe, but at least something. Note, that right now only ON CLUSTER query it self is supported, but separate clusters are not (i.e. GRANT CLUSTER some_cluster_name TO default), since right now grants sticked to database+. v2: on_cluster_queries_require_cluster_grant v3: fix test and process flags as bit mask Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>	2022-05-16 13:57:45 +03:00
Vitaly Baranov	69bec2f377	Users without assigned row policies can view rows now.	2022-05-07 14:50:24 +02:00