mirror of
https://github.com/ClickHouse/ClickHouse.git
synced 2024-12-08 15:31:57 +00:00
01e1c5345a
In case you have different roles for the same user on multiple clusters,
ON CLUSTER query can help to overcome some limitations.
Consider the following example:
- cluster_with_data, dev_user (readonly=2)
- stage_cluster, dev_user (readonly=0)
So when you will execute the following query from stage_cluster, it will
be successfully executed, since ON CLUSTER queries has different system
profile:
DROP DATABASE default ON CLUSTER cluster_with_data
This is not 100% safe, but at least something.
Note, that right now only ON CLUSTER query it self is supported, but
separate clusters are not (i.e. GRANT CLUSTER some_cluster_name TO
default), since right now grants sticked to database+.
v2: on_cluster_queries_require_cluster_grant
v3: fix test and process flags as bit mask
Signed-off-by: Azat Khuzhin <a.khuzhin@semrush.com>
143 lines
7.6 KiB
Plaintext
143 lines
7.6 KiB
Plaintext
SHOW DATABASES [] DATABASE SHOW
|
|
SHOW TABLES [] TABLE SHOW
|
|
SHOW COLUMNS [] COLUMN SHOW
|
|
SHOW DICTIONARIES [] DICTIONARY SHOW
|
|
SHOW [] \N ALL
|
|
SELECT [] COLUMN ALL
|
|
INSERT [] COLUMN ALL
|
|
ALTER UPDATE ['UPDATE'] COLUMN ALTER TABLE
|
|
ALTER DELETE ['DELETE'] COLUMN ALTER TABLE
|
|
ALTER ADD COLUMN ['ADD COLUMN'] COLUMN ALTER COLUMN
|
|
ALTER MODIFY COLUMN ['MODIFY COLUMN'] COLUMN ALTER COLUMN
|
|
ALTER DROP COLUMN ['DROP COLUMN'] COLUMN ALTER COLUMN
|
|
ALTER COMMENT COLUMN ['COMMENT COLUMN'] COLUMN ALTER COLUMN
|
|
ALTER CLEAR COLUMN ['CLEAR COLUMN'] COLUMN ALTER COLUMN
|
|
ALTER RENAME COLUMN ['RENAME COLUMN'] COLUMN ALTER COLUMN
|
|
ALTER MATERIALIZE COLUMN ['MATERIALIZE COLUMN'] COLUMN ALTER COLUMN
|
|
ALTER COLUMN [] \N ALTER TABLE
|
|
ALTER MODIFY COMMENT ['MODIFY COMMENT'] TABLE ALTER TABLE
|
|
ALTER ORDER BY ['ALTER MODIFY ORDER BY','MODIFY ORDER BY'] TABLE ALTER INDEX
|
|
ALTER SAMPLE BY ['ALTER MODIFY SAMPLE BY','MODIFY SAMPLE BY'] TABLE ALTER INDEX
|
|
ALTER ADD INDEX ['ADD INDEX'] TABLE ALTER INDEX
|
|
ALTER DROP INDEX ['DROP INDEX'] TABLE ALTER INDEX
|
|
ALTER MATERIALIZE INDEX ['MATERIALIZE INDEX'] TABLE ALTER INDEX
|
|
ALTER CLEAR INDEX ['CLEAR INDEX'] TABLE ALTER INDEX
|
|
ALTER INDEX ['INDEX'] \N ALTER TABLE
|
|
ALTER ADD PROJECTION ['ADD PROJECTION'] TABLE ALTER PROJECTION
|
|
ALTER DROP PROJECTION ['DROP PROJECTION'] TABLE ALTER PROJECTION
|
|
ALTER MATERIALIZE PROJECTION ['MATERIALIZE PROJECTION'] TABLE ALTER PROJECTION
|
|
ALTER CLEAR PROJECTION ['CLEAR PROJECTION'] TABLE ALTER PROJECTION
|
|
ALTER PROJECTION ['PROJECTION'] \N ALTER TABLE
|
|
ALTER ADD CONSTRAINT ['ADD CONSTRAINT'] TABLE ALTER CONSTRAINT
|
|
ALTER DROP CONSTRAINT ['DROP CONSTRAINT'] TABLE ALTER CONSTRAINT
|
|
ALTER CONSTRAINT ['CONSTRAINT'] \N ALTER TABLE
|
|
ALTER TTL ['ALTER MODIFY TTL','MODIFY TTL'] TABLE ALTER TABLE
|
|
ALTER MATERIALIZE TTL ['MATERIALIZE TTL'] TABLE ALTER TABLE
|
|
ALTER SETTINGS ['ALTER SETTING','ALTER MODIFY SETTING','MODIFY SETTING','RESET SETTING'] TABLE ALTER TABLE
|
|
ALTER MOVE PARTITION ['ALTER MOVE PART','MOVE PARTITION','MOVE PART'] TABLE ALTER TABLE
|
|
ALTER FETCH PARTITION ['ALTER FETCH PART','FETCH PARTITION'] TABLE ALTER TABLE
|
|
ALTER FREEZE PARTITION ['FREEZE PARTITION','UNFREEZE'] TABLE ALTER TABLE
|
|
ALTER DATABASE SETTINGS ['ALTER DATABASE SETTING','ALTER MODIFY DATABASE SETTING','MODIFY DATABASE SETTING'] DATABASE ALTER DATABASE
|
|
ALTER TABLE [] \N ALTER
|
|
ALTER DATABASE [] \N ALTER
|
|
ALTER VIEW REFRESH ['ALTER LIVE VIEW REFRESH','REFRESH VIEW'] VIEW ALTER VIEW
|
|
ALTER VIEW MODIFY QUERY ['ALTER TABLE MODIFY QUERY'] VIEW ALTER VIEW
|
|
ALTER VIEW [] \N ALTER
|
|
ALTER [] \N ALL
|
|
CREATE DATABASE [] DATABASE CREATE
|
|
CREATE TABLE [] TABLE CREATE
|
|
CREATE VIEW [] VIEW CREATE
|
|
CREATE DICTIONARY [] DICTIONARY CREATE
|
|
CREATE TEMPORARY TABLE [] GLOBAL CREATE
|
|
CREATE FUNCTION [] GLOBAL CREATE
|
|
CREATE [] \N ALL
|
|
DROP DATABASE [] DATABASE DROP
|
|
DROP TABLE [] TABLE DROP
|
|
DROP VIEW [] VIEW DROP
|
|
DROP DICTIONARY [] DICTIONARY DROP
|
|
DROP FUNCTION [] GLOBAL DROP
|
|
DROP [] \N ALL
|
|
TRUNCATE ['TRUNCATE TABLE'] TABLE ALL
|
|
OPTIMIZE ['OPTIMIZE TABLE'] TABLE ALL
|
|
KILL QUERY [] GLOBAL ALL
|
|
KILL TRANSACTION [] GLOBAL ALL
|
|
MOVE PARTITION BETWEEN SHARDS [] GLOBAL ALL
|
|
CREATE USER [] GLOBAL ACCESS MANAGEMENT
|
|
ALTER USER [] GLOBAL ACCESS MANAGEMENT
|
|
DROP USER [] GLOBAL ACCESS MANAGEMENT
|
|
CREATE ROLE [] GLOBAL ACCESS MANAGEMENT
|
|
ALTER ROLE [] GLOBAL ACCESS MANAGEMENT
|
|
DROP ROLE [] GLOBAL ACCESS MANAGEMENT
|
|
ROLE ADMIN [] GLOBAL ACCESS MANAGEMENT
|
|
CREATE ROW POLICY ['CREATE POLICY'] TABLE ACCESS MANAGEMENT
|
|
ALTER ROW POLICY ['ALTER POLICY'] TABLE ACCESS MANAGEMENT
|
|
DROP ROW POLICY ['DROP POLICY'] TABLE ACCESS MANAGEMENT
|
|
CREATE QUOTA [] GLOBAL ACCESS MANAGEMENT
|
|
ALTER QUOTA [] GLOBAL ACCESS MANAGEMENT
|
|
DROP QUOTA [] GLOBAL ACCESS MANAGEMENT
|
|
CREATE SETTINGS PROFILE ['CREATE PROFILE'] GLOBAL ACCESS MANAGEMENT
|
|
ALTER SETTINGS PROFILE ['ALTER PROFILE'] GLOBAL ACCESS MANAGEMENT
|
|
DROP SETTINGS PROFILE ['DROP PROFILE'] GLOBAL ACCESS MANAGEMENT
|
|
SHOW USERS ['SHOW CREATE USER'] GLOBAL SHOW ACCESS
|
|
SHOW ROLES ['SHOW CREATE ROLE'] GLOBAL SHOW ACCESS
|
|
SHOW ROW POLICIES ['SHOW POLICIES','SHOW CREATE ROW POLICY','SHOW CREATE POLICY'] TABLE SHOW ACCESS
|
|
SHOW QUOTAS ['SHOW CREATE QUOTA'] GLOBAL SHOW ACCESS
|
|
SHOW SETTINGS PROFILES ['SHOW PROFILES','SHOW CREATE SETTINGS PROFILE','SHOW CREATE PROFILE'] GLOBAL SHOW ACCESS
|
|
SHOW ACCESS [] \N ACCESS MANAGEMENT
|
|
ACCESS MANAGEMENT [] \N ALL
|
|
SYSTEM SHUTDOWN ['SYSTEM KILL','SHUTDOWN'] GLOBAL SYSTEM
|
|
SYSTEM DROP DNS CACHE ['SYSTEM DROP DNS','DROP DNS CACHE','DROP DNS'] GLOBAL SYSTEM DROP CACHE
|
|
SYSTEM DROP MARK CACHE ['SYSTEM DROP MARK','DROP MARK CACHE','DROP MARKS'] GLOBAL SYSTEM DROP CACHE
|
|
SYSTEM DROP UNCOMPRESSED CACHE ['SYSTEM DROP UNCOMPRESSED','DROP UNCOMPRESSED CACHE','DROP UNCOMPRESSED'] GLOBAL SYSTEM DROP CACHE
|
|
SYSTEM DROP MMAP CACHE ['SYSTEM DROP MMAP','DROP MMAP CACHE','DROP MMAP'] GLOBAL SYSTEM DROP CACHE
|
|
SYSTEM DROP COMPILED EXPRESSION CACHE ['SYSTEM DROP COMPILED EXPRESSION','DROP COMPILED EXPRESSION CACHE','DROP COMPILED EXPRESSIONS'] GLOBAL SYSTEM DROP CACHE
|
|
SYSTEM DROP CACHE ['DROP CACHE'] \N SYSTEM
|
|
SYSTEM RELOAD CONFIG ['RELOAD CONFIG'] GLOBAL SYSTEM RELOAD
|
|
SYSTEM RELOAD SYMBOLS ['RELOAD SYMBOLS'] GLOBAL SYSTEM RELOAD
|
|
SYSTEM RELOAD DICTIONARY ['SYSTEM RELOAD DICTIONARIES','RELOAD DICTIONARY','RELOAD DICTIONARIES'] GLOBAL SYSTEM RELOAD
|
|
SYSTEM RELOAD MODEL ['SYSTEM RELOAD MODELS','RELOAD MODEL','RELOAD MODELS'] GLOBAL SYSTEM RELOAD
|
|
SYSTEM RELOAD FUNCTION ['SYSTEM RELOAD FUNCTIONS','RELOAD FUNCTION','RELOAD FUNCTIONS'] GLOBAL SYSTEM RELOAD
|
|
SYSTEM RELOAD EMBEDDED DICTIONARIES ['RELOAD EMBEDDED DICTIONARIES'] GLOBAL SYSTEM RELOAD
|
|
SYSTEM RELOAD [] \N SYSTEM
|
|
SYSTEM RESTART DISK ['SYSTEM RESTART DISK'] GLOBAL SYSTEM
|
|
SYSTEM MERGES ['SYSTEM STOP MERGES','SYSTEM START MERGES','STOP MERGES','START MERGES'] TABLE SYSTEM
|
|
SYSTEM TTL MERGES ['SYSTEM STOP TTL MERGES','SYSTEM START TTL MERGES','STOP TTL MERGES','START TTL MERGES'] TABLE SYSTEM
|
|
SYSTEM FETCHES ['SYSTEM STOP FETCHES','SYSTEM START FETCHES','STOP FETCHES','START FETCHES'] TABLE SYSTEM
|
|
SYSTEM MOVES ['SYSTEM STOP MOVES','SYSTEM START MOVES','STOP MOVES','START MOVES'] TABLE SYSTEM
|
|
SYSTEM DISTRIBUTED SENDS ['SYSTEM STOP DISTRIBUTED SENDS','SYSTEM START DISTRIBUTED SENDS','STOP DISTRIBUTED SENDS','START DISTRIBUTED SENDS'] TABLE SYSTEM SENDS
|
|
SYSTEM REPLICATED SENDS ['SYSTEM STOP REPLICATED SENDS','SYSTEM START REPLICATED SENDS','STOP REPLICATED SENDS','START REPLICATED SENDS'] TABLE SYSTEM SENDS
|
|
SYSTEM SENDS ['SYSTEM STOP SENDS','SYSTEM START SENDS','STOP SENDS','START SENDS'] \N SYSTEM
|
|
SYSTEM REPLICATION QUEUES ['SYSTEM STOP REPLICATION QUEUES','SYSTEM START REPLICATION QUEUES','STOP REPLICATION QUEUES','START REPLICATION QUEUES'] TABLE SYSTEM
|
|
SYSTEM DROP REPLICA ['DROP REPLICA'] TABLE SYSTEM
|
|
SYSTEM SYNC REPLICA ['SYNC REPLICA'] TABLE SYSTEM
|
|
SYSTEM RESTART REPLICA ['RESTART REPLICA'] TABLE SYSTEM
|
|
SYSTEM RESTORE REPLICA ['RESTORE REPLICA'] TABLE SYSTEM
|
|
SYSTEM SYNC DATABASE REPLICA ['SYNC DATABASE REPLICA'] DATABASE SYSTEM
|
|
SYSTEM FLUSH DISTRIBUTED ['FLUSH DISTRIBUTED'] TABLE SYSTEM FLUSH
|
|
SYSTEM FLUSH LOGS ['FLUSH LOGS'] GLOBAL SYSTEM FLUSH
|
|
SYSTEM FLUSH [] \N SYSTEM
|
|
SYSTEM THREAD FUZZER ['SYSTEM START THREAD FUZZER','SYSTEM STOP THREAD FUZZER','START THREAD FUZZER','STOP THREAD FUZZER'] GLOBAL SYSTEM
|
|
SYSTEM [] \N ALL
|
|
dictGet ['dictHas','dictGetHierarchy','dictIsIn'] DICTIONARY ALL
|
|
addressToLine [] GLOBAL INTROSPECTION
|
|
addressToLineWithInlines [] GLOBAL INTROSPECTION
|
|
addressToSymbol [] GLOBAL INTROSPECTION
|
|
demangle [] GLOBAL INTROSPECTION
|
|
INTROSPECTION ['INTROSPECTION FUNCTIONS'] \N ALL
|
|
FILE [] GLOBAL SOURCES
|
|
URL [] GLOBAL SOURCES
|
|
REMOTE [] GLOBAL SOURCES
|
|
MONGO [] GLOBAL SOURCES
|
|
MYSQL [] GLOBAL SOURCES
|
|
POSTGRES [] GLOBAL SOURCES
|
|
SQLITE [] GLOBAL SOURCES
|
|
ODBC [] GLOBAL SOURCES
|
|
JDBC [] GLOBAL SOURCES
|
|
HDFS [] GLOBAL SOURCES
|
|
S3 [] GLOBAL SOURCES
|
|
HIVE [] GLOBAL SOURCES
|
|
SOURCES [] \N ALL
|
|
CLUSTER [] GLOBAL ALL
|
|
ALL ['ALL PRIVILEGES'] \N \N
|
|
NONE ['USAGE','NO PRIVILEGES'] \N \N
|