ClickHouse / ClickHouse/ClickHouse
Better support for row level security filter with Distributed
Open
comp-rbac
feature
- Dominant language
- C++
- Stars
- 49.9k
- Forks
- 9k
- Avg merge
- 21h 32m
- Merged PRs (30d)
- 515
Description
Now, it is possible to use row level security filter with Distributed table. In order to apply it, you need to set up filter condition on every remote host (using xml config or RBAC). However, it may be not convenient to support a full set of users on every data node in coherence.
Possible solution:
* Allow to specify row level filter for distributed table
* Send filtering condition as a part of remote query (e.g. in client info)
This require a change in native protocol. If remote host is old, or row level filter cannot be applied, throw an exception.
Contributor guide
Assessment
This issue has not been assessed yet.