Comment on How we give every user SQL access to a shared ClickHouse clusterparentComments−orf5moBack office, employee access is a completely different problem to what is described in the post.How do you enforce tenant isolation with that method, or prevent unbounded table reads?−tossandthrow5moThey likely don't need tenant isolation and unbound table reads can be mitigated using timeouts.We do something similar for our backoffice - just with the difference that it is Claude that has full freedom to write queries.−paulryanrogers5moCan Claude drop tables?−weird-eye-issue5moRLS...
Comments
Back office, employee access is a completely different problem to what is described in the post.
How do you enforce tenant isolation with that method, or prevent unbounded table reads?
They likely don't need tenant isolation and unbound table reads can be mitigated using timeouts.
We do something similar for our backoffice - just with the difference that it is Claude that has full freedom to write queries.
Can Claude drop tables?
RLS...