{"action":"created","issue":{"url":"https://api.github.com/repos/yandex/ClickHouse/issues/2858","repository_url":"https://api.github.com/repos/yandex/ClickHouse","labels_url":"https://api.github.com/repos/yandex/ClickHouse/issues/2858/labels{/name}","comments_url":"https://api.github.com/repos/yandex/ClickHouse/issues/2858/comments","events_url":"https://api.github.com/repos/yandex/ClickHouse/issues/2858/events","html_url":"https://github.com/yandex/ClickHouse/issues/2858","id":350016912,"node_id":"MDU6SXNzdWUzNTAwMTY5MTI=","number":2858,"title":"Разграничение прав пользователей к разным бд","user":{"login":"hashbash","id":10183440,"node_id":"MDQ6VXNlcjEwMTgzNDQw","avatar_url":"https://avatars3.githubusercontent.com/u/10183440?v=4","gravatar_id":"","url":"https://api.github.com/users/hashbash","html_url":"https://github.com/hashbash","followers_url":"https://api.github.com/users/hashbash/followers","following_url":"https://api.github.com/users/hashbash/following{/other_user}","gists_url":"https://api.github.com/users/hashbash/gists{/gist_id}","starred_url":"https://api.github.com/users/hashbash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hashbash/subscriptions","organizations_url":"https://api.github.com/users/hashbash/orgs","repos_url":"https://api.github.com/users/hashbash/repos","events_url":"https://api.github.com/users/hashbash/events{/privacy}","received_events_url":"https://api.github.com/users/hashbash/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-08-13T12:52:59Z","updated_at":"2018-08-13T13:13:39Z","closed_at":null,"author_association":"NONE","body":"Добрый день!\r\n\r\nНам очень нужен функционал, который позволит разграничивать права доступа к бд внутри КХ. Например, у пользователя Х должен быть доступ на Запись к бд1 и только Чтение к бд2.\r\n\r\n\r\nЧтобы можно было реализовать такую логическую структуру:\r\n\r\ndatabase_name     |user_name |access   |\r\n---------|----------|----------|\r\nlogger   |user1     |readonly  |\r\nraw      |user1     |readwrite  |\r\nraw |user2     |readonly |\r\n\r\nюзкейс: у нас много аналитиков, которым нужно дать права на запись только к своим (аналитическим бд) и при этом у них должен быть доступ только на чтение другим бд (туда, куда происходит запись данных от приложений).\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/yandex/ClickHouse/issues/comments/412513269","html_url":"https://github.com/yandex/ClickHouse/issues/2858#issuecomment-412513269","issue_url":"https://api.github.com/repos/yandex/ClickHouse/issues/2858","id":412513269,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMjUxMzI2OQ==","user":{"login":"blinkov","id":623861,"node_id":"MDQ6VXNlcjYyMzg2MQ==","avatar_url":"https://avatars3.githubusercontent.com/u/623861?v=4","gravatar_id":"","url":"https://api.github.com/users/blinkov","html_url":"https://github.com/blinkov","followers_url":"https://api.github.com/users/blinkov/followers","following_url":"https://api.github.com/users/blinkov/following{/other_user}","gists_url":"https://api.github.com/users/blinkov/gists{/gist_id}","starred_url":"https://api.github.com/users/blinkov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/blinkov/subscriptions","organizations_url":"https://api.github.com/users/blinkov/orgs","repos_url":"https://api.github.com/users/blinkov/repos","events_url":"https://api.github.com/users/blinkov/events{/privacy}","received_events_url":"https://api.github.com/users/blinkov/received_events","type":"User","site_admin":false},"created_at":"2018-08-13T13:13:39Z","updated_at":"2018-08-13T13:13:39Z","author_association":"CONTRIBUTOR","body":"На данный момент см. последний абзац в https://clickhouse.yandex/docs/ru/operations/access_rights/\r\n\r\nДля таких аналитиков можно завести отдельный небольшой кластер с readwrite доступом и настроить там distributed таблицы, которые бы «смотрели» на основной кластер. Заодно это обезопасит основной кластер от неожиданно закончившегося места или излишней нагрузки на ZooKeeper."}}
{"actor":{"display_login":"blinkov"}}