You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[Bug] ClickHouse: SELECT permission denied on explicitly granted tables, while database-level access works #21629
In Bytebase v3.23.0, ClickHouse table-level permissions do not appear to work correctly.
When a user is granted access at the database level, the user can successfully execute SELECT queries against individual tables within that database.
However, when the same user is granted access to specific tables individually, SELECT queries against those explicitly authorized tables fail with Permission Denied.
The issue occurs even though the user has already been granted permission to query those tables.
Steps to reproduce
Connect a ClickHouse database to Bytebase v3.23.0.
Create or select a user.
Grant the user query access to an entire database (e.g., example_db).
Execute SELECT * FROM example_db.orders LIMIT 10;.
Result: Success.
Revoke the database-level permission.
Grant the same user query access specifically to example_db.orders.
Execute the exact same SQL query.
Result: Permission Denied.
Expected behavior
A user who has been explicitly granted SELECT permission on a specific table should be able to query that table, regardless of whether database-level access has been granted.
Activity