ooni / ooni/devops

Fix readonly user permissions in clickhouse cluster

Open
#245 0 comments 0 reactions 1 assignee View on GitHub

@hellais is already working on this.

Since May 20, 2025.

chore funder/otffoss2025
Dominant language
HCL
Stars
4
Forks
15
Avg merge
1h 50m
Merged PRs (30d)
4

Description

Currently, due to the fact we would like to set things like query priority or maximum query time in the application which is not allowed in readonly mode, we had to use the write user in many places where we would rather not.

We should create a new readonly user that has these permissions and update the following clickhouse URLs to one which has also edit settings permissions: https://clickhouse.com/docs/operations/settings/permissions-for-queries.

The places to update are:

  • grafana clickhouse data source
  • ooni-api in backend-fsn

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.