ClickHouse/tests
Azat Khuzhin 01e1c5345a Add separate CLUSTER grant
In case you have different roles for the same user on multiple clusters,
ON CLUSTER query can help to overcome some limitations.

Consider the following example:
- cluster_with_data, dev_user (readonly=2)
- stage_cluster, dev_user (readonly=0)

So when you will execute the following query from stage_cluster, it will
be successfully executed, since ON CLUSTER queries has different system
profile:

    DROP DATABASE default ON CLUSTER cluster_with_data

This is not 100% safe, but at least something.

Note, that right now only ON CLUSTER query it self is supported, but
separate clusters are not (i.e. GRANT CLUSTER some_cluster_name TO
default), since right now grants sticked to database+.

v2: on_cluster_queries_require_cluster_grant
v3: fix test and process flags as bit mask
Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>
2022-05-16 13:57:45 +03:00
..
ci Merge pull request #37095 from ClickHouse/upload-ppc64le-binary 2022-05-15 04:33:06 +03:00
config Add separate CLUSTER grant 2022-05-16 13:57:45 +03:00
fuzz
instructions
integration Merge branch 'master' into enable-overcommit-for-user 2022-05-11 20:04:20 +00:00
jepsen.clickhouse-keeper
perf_drafts
performance Fixed tests 2022-05-11 21:59:51 +02:00
queries Add separate CLUSTER grant 2022-05-16 13:57:45 +03:00
.gitignore
clickhouse-test Add settings randomization 2022-05-11 01:30:59 +02:00
CMakeLists.txt Disable clickhouse-tests by default 2022-03-22 11:10:00 +01:00
msan_suppressions.txt
stress
tsan_suppressions.txt
ubsan_suppressions.txt