Helicone allows users to write SQL directly to a shared ClickHouse

https://www.justintorre.com/blogs/clickhouse-rls-query-parameters

by justintorre75 • 9 days ago

11 3 9 days ago

justintorre.com

zX41ZdbW• 8 days ago

Great article! About inserting LIMIT - we have out-of-band `limit` and `offset` settings:

https://play.clickhouse.com/docs?user=play#q=limit&name=limi...

sandeepkd• 6 days ago

This is an interesting topic in itself, pretty much applies to all shared spaces. The security challenge is somewhat solvable with shared (tenant based) databases, I am more worried about the noisy neighbor problem. Its really easy to write a bad query which can drastically slow down the DB.

jbonatakis• 6 days ago

I’ve built a similar thing against Snowflake, with one added layer: tenant-scoped views with the ID baked in, and an associated tenant-scoped role that only has read access to its own views.

It also lets you make updates to the underlying table (shared between all tenant views) and then separately update the views. As long as you aren’t making breaking schema changes you can more easily validate the changes before releasing.

Helicone allows users to write SQL directly to a shared ClickHouse

Related Stories