Ability to change own password

[den-crane]

Any syntax is OK.

SET PASSWORD = PASSWORD('123');

ALTER USER ... IDENTIFIED BY '123';

[filimonov]

Maybe it should require some grant?

[filimonov]

Also in context of #15552

Security scanner can came and set up the password :)

[den-crane]

Also is unclear how to do it for readonly users ( + on cluster)

[alexey-milovidov]

The feature makes sense.

[alexey-milovidov]

It works:

ALTER USER default IDENTIFIED WITH 'fsl;kgj67sk{A'

[den-crane]

alter user foo identified by 'bar';

allows to superusers change any user password, including own password.

but it does not allow to change own password to a not superuser

clickhouse-client -u foo --password=bar

alter user foo identified by 'ba1r';

DB::Exception: foo: Not enough privileges. To execute this query it's necessary to have grant ALTER USER ON *.*. (ACCESS_DENIED)