Comment by badmonster
1 day ago
How does Logchef handle multi-tenant access control at the ClickHouse query level to prevent cross-team data leaks?
1 day ago
How does Logchef handle multi-tenant access control at the ClickHouse query level to prevent cross-team data leaks?
So, Logchef has a concept of "Source" which represents a ClickHouse table. You give the DSN (essentially host/port/user/password for now) and connect. In prod scenarios, usually you only `GRANT SELECT ON db_name.table_name TO user_name;`
Once you add the source, you can "connect" the source to a team. Only the members of the team will be allowed to query this source. So you can have multiple teams and add users accordingly. A source can be added to multiple teams as well.
Hope that answers your question!