[Bug] ClickHouse: SELECT permission denied on explicitly granted tables, while database-level access works · Issue #21629 · bytebase/bytebase · GitHub
Skip to content

[Bug] ClickHouse: SELECT permission denied on explicitly granted tables, while database-level access works #21629

Open

Description

@mangareader

Provide the Bytebase version you are using

3.23.0

Describe the bug

In Bytebase v3.23.0, ClickHouse table-level permissions do not appear to work correctly.

When a user is granted access at the database level, the user can successfully execute SELECT queries against individual tables within that database.

However, when the same user is granted access to specific tables individually, SELECT queries against those explicitly authorized tables fail with Permission Denied.

The issue occurs even though the user has already been granted permission to query those tables.

Steps to reproduce

  1. Connect a ClickHouse database to Bytebase v3.23.0.

  2. Create or select a user.

  3. Grant the user query access to an entire database (e.g., example_db).

  4. Execute SELECT * FROM example_db.orders LIMIT 10;.

  5. Result: Success.

  6. Revoke the database-level permission.

  7. Grant the same user query access specifically to example_db.orders.

  8. Execute the exact same SQL query.

  9. Result: Permission Denied.

Expected behavior

A user who has been explicitly granted SELECT permission on a specific table should be able to query that table, regardless of whether database-level access has been granted.

Provide the database you are using

No response

Additional context

No response

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions