ClickHouse / metabase-clickhouse-driver

ClickHouse database driver for the Metabase business intelligence front-end
Apache License 2.0
476 stars 92 forks source link

Add support for role-based connection impersonation #179

Closed likeshumidity closed 1 year ago

likeshumidity commented 1 year ago

Related to https://github.com/ClickHouse/metabase-clickhouse-driver/issues/177

Metabase added support for connection impersonation to allow SQL-based row-level security in x.47.0.

The multimethods set-role!, set-role-statement, and default-database-role have been added. These methods are used to enable connection impersonation, which is a new feature added in 0.47.0. Connection impersonation allows users to be assigned to specific database roles which are set before any queries are executed, so that access to tables can be restricted at the database level instead of (or in conjunction with) Metabase's built-in permissions system.

See:

slvrtrn commented 1 year ago

Added in 1.2.0