upvote
Show HN: Logchef – Schema-agnostic log viewer for ClickHouse

(github.com)

How does Logchef handle multi-tenant access control at the ClickHouse query level to prevent cross-team data leaks?
reply
So, Logchef has a concept of "Source" which represents a ClickHouse table. You give the DSN (essentially host/port/user/password for now) and connect. In prod scenarios, usually you only `GRANT SELECT ON db_name.table_name TO user_name;`

Once you add the source, you can "connect" the source to a team. Only the members of the team will be allowed to query this source. So you can have multiple teams and add users accordingly. A source can be added to multiple teams as well.

Hope that answers your question!

reply