Skip to content

Comment on How we give every user SQL access to a shared ClickHouse clusterparent

Comments

You’re right RLS can go a long way here. With complex RBAC rules it can get tricky though.

The main advantages of a DSL are you can expose a nicer interface to users (table names, columns, virtual columns, automatic joins, query optimization).

We very intentionally kept the syntax as close to regular ClickHouse as possible but added some functions.

table names, columns, virtual columns

This sounds solvable with clickhouse views?

automatic joins

Is this also not solvable with views? Also, clickhouse heavily discourages joins so I wonder how often this winds up being beneficial? For us, we only ever join against tenant metadata (i.e. resolving ID to name)

query optimization

This sounds potentially interesting - clickhouse's query optimizer is not great IME, but it's definitely getting better

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.