feat(0477): prices_writer monitoring grants (system.mutations + view_refreshes) - #399
Merged
stkrolikiewicz merged 2 commits intoAug 12, 2026
Merged
Conversation
…w_refreshes Requested by the prices owner after the 07-21..08-03 coarse-rollup freeze: pending mutations sat undone for 13 days and this signal alone would have flagged it days earlier. Read-only, same shape as the 0314 system.parts grant. Applied on the box via inode-preserving in-place edit (no container recreate needed); this commit is the byte-identical mirror so the next --tags app deploy is a no-op.
stkrolikiewicz
added a commit
that referenced
this pull request
Aug 12, 2026
nx format:check --all runs against the merge result, so two unformatted files on develop fail CI for every open PR, not just their own. Table column padding only, no content change. Refs #371
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Two read-only grants for the
prices_writerXML user, requested by the prices owner after their 07-21 → 08-03 coarse-rollup freeze post-mortem: pending mutations sat undone for 13 days, andsystem.mutationsalone would have flagged it days before anyone noticed. Their new freshness alarm measures data, not MV exit status; these let it also watch the precursor signals.GRANT SELECT ON system.mutationsGRANT SELECT ON system.view_refreshesSame shape as the
system.partsgrant from task 0314. RBAC doc row updated in the same commit.Apply path (no container recreate): the box file is a single-file bind mount, so ansible's write-and-rename never reaches the container (0314 lesson). Instead the box copy is overwritten in place (
cat new > services.xml, inode preserved) — ClickHouse hot-reloadsusers.don content change. This PR is the byte-identical mirror, so the next--tags appdeploy rsyncs nothing.Verification: CH config-reload log line +
SHOW GRANTS FOR prices_writeron the box, then the prices owner confirms a liveSELECT count() FROM system.mutationsunder their credentials.