ClickHouse/docs/en/sql-reference
Azat Khuzhin 01e1c5345a Add separate CLUSTER grant
In case you have different roles for the same user on multiple clusters,
ON CLUSTER query can help to overcome some limitations.

Consider the following example:
- cluster_with_data, dev_user (readonly=2)
- stage_cluster, dev_user (readonly=0)

So when you will execute the following query from stage_cluster, it will
be successfully executed, since ON CLUSTER queries has different system
profile:

    DROP DATABASE default ON CLUSTER cluster_with_data

This is not 100% safe, but at least something.

Note, that right now only ON CLUSTER query it self is supported, but
separate clusters are not (i.e. GRANT CLUSTER some_cluster_name TO
default), since right now grants sticked to database+.

v2: on_cluster_queries_require_cluster_grant
v3: fix test and process flags as bit mask
Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>
2022-05-16 13:57:45 +03:00
..
aggregate-functions Update grouparray.md 2022-05-16 04:29:30 +03:00
data-types fix boolean documents. 2022-04-26 05:51:56 +08:00
dictionaries Fix documentation for executable user defined functions configuration 2022-04-28 18:01:10 +02:00
functions Add BLAKE3 hash function 2022-05-11 12:10:16 -06:00
operators Revised /en folder 2022-04-09 07:34:21 -06:00
statements Add separate CLUSTER grant 2022-05-16 13:57:45 +03:00
table-functions Revised /en folder 2022-04-09 07:34:21 -06:00
window-functions Misspelled words 2022-05-11 20:08:53 +08:00
_category_.yml EOL fixes 2022-04-19 13:50:45 -06:00
ansi.md Revised /en folder 2022-04-09 07:34:21 -06:00
distributed-ddl.md Added reference docs to sidebar 2022-04-10 21:27:48 -06:00
syntax.md Fix broken links 2022-04-19 20:17:01 +02:00