Allowing your users to query ClickHouse directly using raw SQL
Summary
Helicone adds a SQL editor (HQL) that lets users query a shared ClickHouse cluster directly with raw SQL. The system enforces tenancy via row policies and per-query settings to ensure organization-level data isolation, and includes an AST-based parser and safety checks to prevent leakage. The post also documents production considerations and security testing.