mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-20 14:34:25 +00:00
28 lines
1.8 KiB
Plaintext
28 lines
1.8 KiB
Plaintext
---
|
|
title: Technical Advisory 10014
|
|
description: "A-10014: ZITADEL v2.66.6 corrects existing project grant owners, breaking ListAllProjectGrants with x-ZITADEL-orgid header set"
|
|
---
|
|
|
|
## Date
|
|
|
|
Versions: >= v2.67.3, v2.66 >= v2.66.6
|
|
|
|
Date: 2025-01-17
|
|
|
|
## Description
|
|
|
|
Prior to version [v2.66.0](https://github.com/zitadel/zitadel/releases/tag/v2.66.0), some project grants were incorrectly created under the granted organization instead of the project owner's organization. To find these grants, users had to set the `x-zitadel-orgid` header to the granted organization ID when using the [`ListAllProjectGrants`](/reference/api/management/zitadel.management.v1.ManagementService.ListAllProjectGrants) gRPC method.
|
|
|
|
Zitadel [v2.66.0](https://github.com/zitadel/zitadel/releases/tag/v2.66.0) corrected this behavior for new grants. However, existing grants were not automatically updated. Version v2.66.6 corrects the owner of these existing grants.
|
|
|
|
## Impact
|
|
|
|
After the release of v2.66.6, if your application uses the [`ListAllProjectGrants`](/reference/api/management/zitadel.management.v1.ManagementService.ListAllProjectGrants) method with the `x-zitadel-orgid` header set to the granted organization ID, you will not retrieve any results.
|
|
|
|
## Mitigation
|
|
|
|
To ensure your application continues to function correctly after the release of v2.66.6, implement the following changes:
|
|
|
|
1. **Conditional Header:** Only set the `x-zitadel-orgid` header to the project owner's organization ID if the user executing the [`ListAllProjectGrants`](/reference/api/management/zitadel.management.v1.ManagementService.ListAllProjectGrants) method belongs to a different organization than the project.
|
|
2. **Use `grantedOrgIdQuery`:** Utilize the `grantedOrgIdQuery` parameter to filter grants for the specific granted organization.
|