Files
Nikita Mikhailov 8944b9658c Require SHOW NAMED COLLECTIONS SECRETS to override named collections
Check stored keys and aliases before applying query arguments, backup
arguments, or `SETTINGS`. Allow adding missing keys and preserve explicit
`NOT OVERRIDABLE` restrictions. Dictionary sources may only add missing
keys because background loading does not retain the caller's access context.

Make `allow_named_collection_override_by_default` obsolete. Update the
documentation and affected tests, and add regression coverage for scoped
grants, roles, revocation, aliases, headers, XML paths, and engine settings.

Validated with a debug build, five functional tests, and three dictionary
integration tests.

Closes: https://github.com/ClickHouse/clickhouse-private/issues/53768
Related: https://github.com/ClickHouse/clickhouse-private/issues/53768#issuecomment-5897437721
2026-09-30 21:48:48 +02:00
..