Raúl Marín
6ad72f1b8f
Implement ServerSetting 'allowed_feature_tier'
2024-11-12 16:56:01 +01:00
Alexey Milovidov
10ce7c54f8
Revert "Revert "Miscellaneous""
2024-10-26 20:59:45 +02:00
Alexey Milovidov
d6b38a9eae
Revert "Miscellaneous"
2024-10-26 20:59:26 +02:00
Alexey Milovidov
7d6beb5587
Add a lot of minor things from the private repository
2024-10-25 20:00:24 +02:00
Alexey Milovidov
7539dc5c67
Merge branch 'master' into revert-68608-revert-60197-format-settings-parsing
2024-10-14 18:12:25 +02:00
Alexey Milovidov
960434e59a
Merge branch 'master' of github.com:ClickHouse/ClickHouse into revert-68608-revert-60197-format-settings-parsing
2024-09-21 18:29:56 +02:00
Vitaly Baranov
3c4d6509f3
Refactoring of the code for making a backup and restoring access entities.
2024-09-19 12:31:10 +02:00
Vitaly Baranov
1ccd461c97
Fix restoring access entities dependant on existing ones.
2024-09-17 12:10:31 +02:00
Alexey Milovidov
bf7ec7d639
Revert "Revert "Fix unexpected behavior with FORMAT and SETTINGS parsing""
2024-09-11 13:22:27 +02:00
Alexander Tokmakov
ee9080fba7
Revert "Fix unexpected behavior with FORMAT and SETTINGS parsing"
2024-08-20 15:11:06 +02:00
Alexey Milovidov
73286bad85
Merge branch 'master' into format-settings-parsing
2024-06-23 21:36:50 +02:00
Alexey Milovidov
11d54f4809
Pass-through settings from the client
2024-06-18 15:18:53 +02:00
Vitaly Baranov
d53660dfd4
Fix crash on destroying AccessControl: add explicit shutdown.
2024-06-10 17:37:23 +02:00
jsc0218
ee589f8a8b
Merge remote-tracking branch 'origin/master' into TableEngineGrant_version2
2024-04-03 17:17:33 +00:00
Robert Schulze
e5e84419af
Fix clang-tidy-s
2024-03-11 10:58:54 +00:00
jsc0218
b4b19ae2ad
Merge branch 'master' into TableEngineGrant_version2
2024-02-28 10:56:30 -05:00
Amos Bird
12914d2268
Fix
2024-02-26 02:31:58 +08:00
jsc0218
afa7a95c8c
add backward compatibility
2024-02-20 02:11:31 +00:00
Alexey Gerasimchuck
559de083a3
Implemented failed login attempt counting using quota
2024-01-29 23:20:38 +00:00
Aleksei Filatov
0a1f3f205c
Add external HTTP Basic authenticator ( #55199 )
2023-10-20 19:24:19 +02:00
pufit
2f46ae850e
Merge branch 'master' into pufit/role-from-storage
2023-08-07 17:57:41 -04:00
Vitaly Baranov
16dfb028b6
Remove creation of a unnecessary temporary ContextAccess on login.
2023-08-03 13:44:59 +02:00
pufit
13d9952227
add id to insertImpl
2023-07-27 00:38:51 -04:00
pufit
2a00e2aa6a
Implement MOVE query for the access entities.
2023-07-20 22:20:36 -04:00
Vitaly Baranov
018546a57d
Avoid keeping lock Context::getLock() while recalculating access rights of a connected user.
2023-07-17 14:59:14 +02:00
Nikolay Degterinsky
54c8f63a33
Fixes
2023-04-28 15:12:06 +00:00
Nikolay Degterinsky
df1e56b985
Merge remote-tracking branch 'upstream/master' into bcrypt
2023-04-27 17:01:58 +00:00
Nikolay Degterinsky
12ad5b710a
Separate AuthenticationData and AuthenticationType, small fixes
2023-04-24 15:12:45 +00:00
Nikolay Degterinsky
b599d0bd01
Better
2023-04-21 22:03:56 +00:00
Nikolay Degterinsky
64dc60a8d1
Better version, introduce ASTAuthenticationData
2023-04-10 02:20:57 +00:00
Nikolay Degterinsky
09558003c2
Make workfactor changeable
2023-01-16 22:11:15 +00:00
Nikolay Degterinsky
e814179663
Add default password type
2022-12-28 13:26:23 +00:00
Nikolay Degterinsky
e0defffcb4
Fix build
2022-12-12 13:47:06 +00:00
Nikolay Degterinsky
19e95e8cd8
Better implementation of password rules
2022-12-11 23:59:04 +00:00
Nikolay Degterinsky
3fd10e0011
Better solution
2022-11-25 22:38:28 +00:00
Nikolay Degterinsky
6825d85daa
Add complexity rules for passwords
2022-11-25 22:38:05 +00:00
Nikolay Degterinsky
7292d47923
Merge branch 'master' into mandatory-identification
2022-09-21 12:18:17 +02:00
Sergei Trifonov
cf2db48c29
Merge pull request #40631 from ClickHouse/readonly-settings-allow
...
Allow to modify constrained settings in readonly mode
2022-09-20 02:18:14 +02:00
Vitaly Baranov
5365b105cc
Add SYSTEM RELOAD USERS command.
2022-09-18 12:44:00 +02:00
Nikolay Degterinsky
72d8a04ee6
Add setting 'allow_implicit_no_password'
2022-09-15 08:07:42 +00:00
Sergei Trifonov
7fec55eea4
work in progress
2022-09-02 04:12:05 +02:00
Vitaly Baranov
6bf7bffbeb
Correct the list of always accessible system tables.
2022-07-15 15:44:29 +02:00
Vitaly Baranov
c85b2b5732
Add option enabling that SELECT from the system database requires grant.
2022-07-15 15:44:25 +02:00
Vitaly Baranov
5456bde4a2
Improve gathering metadata for storing ACL in backups.
2022-06-30 09:46:37 +02:00
Vitaly Baranov
a6fc0dea4e
Fix clang-tidy more.
2022-06-20 11:04:37 +02:00
Vitaly Baranov
115be82440
DiskAccessStorage is now allowed to backup by default.
2022-06-19 13:16:36 +02:00
Vitaly Baranov
a0c558a17e
Implement backup/restore for ACL system tables (system.users, system.roles, etc.)
2022-06-17 18:14:31 +02:00
Vitaly Baranov
58f4a86ec7
Rework notifications used in access management.
2022-05-21 10:15:39 +02:00
Azat Khuzhin
01e1c5345a
Add separate CLUSTER grant
...
In case you have different roles for the same user on multiple clusters,
ON CLUSTER query can help to overcome some limitations.
Consider the following example:
- cluster_with_data, dev_user (readonly=2)
- stage_cluster, dev_user (readonly=0)
So when you will execute the following query from stage_cluster, it will
be successfully executed, since ON CLUSTER queries has different system
profile:
DROP DATABASE default ON CLUSTER cluster_with_data
This is not 100% safe, but at least something.
Note, that right now only ON CLUSTER query it self is supported, but
separate clusters are not (i.e. GRANT CLUSTER some_cluster_name TO
default), since right now grants sticked to database+.
v2: on_cluster_queries_require_cluster_grant
v3: fix test and process flags as bit mask
Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>
2022-05-16 13:57:45 +03:00
Vitaly Baranov
69bec2f377
Users without assigned row policies can view rows now.
2022-05-07 14:50:24 +02:00
