mirror of
https://github.com/andwati/zitadel.git
synced 2026-10-20 06:24:25 +00:00
31 lines
1.0 KiB
Plaintext
31 lines
1.0 KiB
Plaintext
---
|
|
title: Technical Advisory 10006
|
|
description: "A-10006: CockroachDB users of ZITADEL require VIEWACTIVITY grant for correct event ordering in versions 2.39.0 and later"
|
|
---
|
|
|
|
## Date and Version
|
|
|
|
Version: 2.39.0
|
|
|
|
Date: Calendar week 41/42 2023
|
|
|
|
## Description
|
|
|
|
Versions >= 2.39.0 require the cockroach database user of ZITADEL to be granted to the `VIEWACTIVITY` grant. This can either be reached by grant the role manually or execute the `zitadel init` command.
|
|
|
|
Cockroach versions 22.2 < 22.2.11 and 23.1 < 23.1.4 will fail the migration. Please make sure to upgrade to more recent versions first. ZITADEL recommends to use the latest stable version of CockroachDB.
|
|
|
|
## Statement
|
|
|
|
To query correct order of events the cockroach database user of ZITADEL needs additional privileges to query the `crdb_internal.cluster_transactions`-table
|
|
|
|
## Mitigation
|
|
|
|
Before migrating to versions >= 2.39.0 make sure the cockroach database user has sufficient grants.
|
|
|
|
CockroachDB version is up to date.
|
|
|
|
## Impact
|
|
|
|
If the user doesn't have sufficient grants, events won't be updated.
|