mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 18:18:55 +00:00
When reacting to `ActorGroupMembership` updates, we were issuing a query to expire Flows given an `actor_id, actor_group_id` combination. Unfortunately, this query never included an `account_id` to scope it, causing a table scan of flows and associated join tables to resolve it. To fix this, we introduce the `account_id` and ensure the expire flows uses this field to ensure only data for an account is considered in the query. Related: https://firezone-inc.sentry.io/issues/6346235615/events/e225e1c488cb4ea3896649aabd529c50