Skip to content

Explain the removed COORDINATOR privilege where readers hit it - #1872

Open
katarinasupe wants to merge 2 commits into
mainfrom
docs/removed-coordinator-privilege
Open

katarinasupe wants to merge 2 commits into
mainfrom
docs/removed-coordinator-privilege

Conversation

@katarinasupe

Copy link
Copy Markdown
Contributor

Description

GRANT COORDINATOR has failed with a bare syntax error since Memgraph 3.13 removed the COORDINATOR privilege (memgraph/memgraph#4399). Only the release notes explained it, and the docs partly contradicted them.

  • Query privileges: removes the three stale COORDINATOR rows (including a duplicate SHOW COORDINATOR SETTINGS row) and lists SHOW ROUTING TABLE under COORDINATOR_READ. The callout said COORDINATOR_READ and COORDINATOR_WRITE replaced COORDINATOR; they don't.
  • RBAC and coordinator authentication: the callouts now say the statements fail with a syntax error and that the new privileges aren't a replacement.
  • Auth errors: adds both errors with their exact messages: GRANT COORDINATOR anywhere, and COORDINATOR_READ/COORDINATOR_WRITE on a data instance.
  • Deprecated features: adds a "Removed privileges" section.

Product PR

None, docs-only change. Ran on Memgraph 3.14.0 in Docker (data instance, with an Enterprise license): GRANT/DENY/REVOKE COORDINATOR, GRANT COORDINATOR_READ/COORDINATOR_WRITE, GRANT ALL PRIVILEGES, SHOW PRIVILEGES. The error text is from that run. Not run on an HA coordinator; the SHOW ROUTING TABLE privilege is from required_privileges.cpp on master.

Remove the stale COORDINATOR rows from the query privileges table and add SHOW
ROUTING TABLE under COORDINATOR_READ. Say in every callout that the new
coordinator privileges aren't a replacement. Add both errors to the auth errors
page and list removed privileges on the deprecated features page.
@vercel

vercel Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
documentation Ready Ready Preview Oct 28, 2026 10:38am UTC

Request Review

This branch was successfully deployed

1 active deployment
Preview — 393ad151 Deployed Oct 28, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant