Why I am not able to access system.numbers as user with no privileges from 24.4? about clickhouse

[den-crane]

24.4 ? It started with 24.1

It's expected behaviour.
The majority of system tables are not available by default anymore.
The only tables related to database schema are available now: system.tables, system.columns, ...

numbers() -- is not a table, it's a table function.
system.one -- is a special table, AFAIK it's needed for select * (select without from section).

You can do something like grant select on system.* to user1;
Or change settings back https://github.com/ClickHouse/ClickHouse/pull/58584/files

https://github.com/ClickHouse/ClickHouse/blob/master/CHANGELOG.md#-clickhouse-release-241-2024-01-30

Enable various changes to improve the access control in the configuration file. These changes affect the behavior, and you check the config.xml in the access_control_improvements section. In case you are not confident, keep the values in the configuration file as they were in the previous version. #58584 (Alexey Milovidov).

[alsugiliazova]

I compared with 24.3 and saw these difference. I was curious because didn’t see anything related in 24.4 changelog. Just wanted to clarify for myself, thanks.

[den-crane]

I definitely see that this behaviour started with 24.1

24.2.3.70

create user user1 identified by 'x';

clickhouse-client -u user1 --password x

select * from system.numbers;

Received exception from server (version 24.2.3):
Code: 497. DB::Exception: Received from localhost:9000.
DB::Exception: user1: Not enough privileges. To execute this query, it's necessary to have the grant 
SELECT(number) ON system.numbers. (ACCESS_DENIED)