v.21.6Improvement

Allow RBAC Row Policy via PostgreSQL Protocol

Allow RBAC row policy via postgresql protocol. Closes #22658. PostgreSQL protocol is enabled in configuration by default. #22755 (Kseniia Sumarokova).
Added support for RBAC row-level security policies when using the PostgreSQL protocol in ClickHouse.

Why it matters

This feature enables enforcement of Role-Based Access Control (RBAC) row policies through the PostgreSQL protocol, enhancing security by ensuring that users accessing ClickHouse via PostgreSQL-compatible clients can benefit from row-level access restrictions. It solves the problem of lacking RBAC row policy enforcement in PostgreSQL protocol connections, providing consistent security across protocols.

How to use it

To use RBAC row policies with the PostgreSQL protocol, ensure the PostgreSQL protocol is enabled in the ClickHouse server configuration (enabled by default). Define RBAC row policies as usual in ClickHouse. When connecting via PostgreSQL protocol, the row policies will be automatically enforced for the authenticated users.