zitadel

mirror of https://github.com/zitadel/zitadel.git synced 2025-03-01 02:17:23 +00:00

History

Silvan 1949d1546a

fix: set correct owner on project grants (#9089 )

# Which Problems Are Solved

In versions previous to v2.66 it was possible to set a different
resource owner on project grants. This was introduced with the new
resource based API. The resource owner was possible to overwrite using
the x-zitadel-org header.

Because of this issue project grants got the wrong resource owner,
instead of the owner of the project it got the granted org which is
wrong because a resource owner of an aggregate is not allowed to change.

# How the Problems Are Solved

- The wrong owners of the events are set to the original owner of the
project.
- A new event is pushed to these aggregates `project.owner.corrected` 
- The projection updates the owners of the user grants if that event was
written

# Additional Changes

The eventstore push function (replaced in version 2.66) writes the
correct resource owner.

# Additional Context

closes https://github.com/zitadel/zitadel/issues/9072

2025-01-15 11:22:16 +01:00

admin

chore: test server for direct resource access

2023-04-24 20:40:31 +03:00

build

fix: allow version to be overwritten by build again (#4656 )

2022-11-07 09:50:44 +00:00

encryption

feat: action v2 signing (#8779 )

2024-11-28 10:06:52 +00:00

hooks

feat: support whole config as env (#6336 )