# [KB]关于 TiCDC 在 create changefeed 时，出现 Error 1227  Access denied; you need (at least one of) the SUPER privilege(s) for this operation 报错的问题

## Description

* 数据同步链路：TiDB --> TiCDC --> RDS (MySQL)
* 版本信息： TiDB: v5.0.1 、TiCDC: v5.0.1

## Root Cause

* 修复 PR [https://github.com/pingcap/ticdc/pull/1743](https://github.com/pingcap/ticdc/pull/1743)

## Diagnostic Steps

1. TiCDC 创建 changefeed ，并且指定下游数据库用户为 root ，出现下述报错，需要下游数据库用户具有 super 权限：

```golang
## tiup ctl:v5.0.1 cdc changefeed create --pd=http://10.1.x.x:2379 --changefeed-id="changefeed-app-01-task"  --sort-engine="unified" --sort-dir="/data1/tidb-financial-app/cdc-sort"  --sink-uri="mysql://root:xxx@10.1.x.x:3306/?time-zone=SYSTEM&max-txn-row=1000&worker-count=96"  --config tidb-changefeed-app-01-changefeed.toml
Starting component `ctl`: /root/.tiup/components/ctl/v5.0.1/ctl cdc changefeed create --pd=http://10.1.x.x:2379 --changefeed-id=changefeed-app-01-task --sort-engine=unified --sort-dir=/data1/tidb-financial-app/cdc-sort --sink-uri=mysql://root:xxx@10.1.x.x:3306/?time-zone=SYSTEM&max-txn-row=1000&worker-count=96 --config tidb-changefeed-app-01-changefeed.toml
[WARN] This index-value distribution mode does not guarantee row-level orderliness when switching on the old value, so please use caution! dispatch-rules: &config.DispatchRule{Matcher:[]string{"changefeed_app_01.*"}, Dispatcher:"rowid"}[WARN] --sort-dir is deprecated in changefeed settings. Please use `cdc server --sort-dir` if possible. If you wish to continue, make sure /data1/tidb-changefeed-app/cdc-sort is writable ON EACH SERVER where you run TiCDC
Error: fail to open MySQL connection: [CDC:ErrMySQLConnectionError]Error 1227: Access denied; you need 
```

   2. 对应的 TiCDC owner 的 log 出现下面的报错：

```golang
[2021/04/30 16:16:00.166 +08:00] [WARN] [owner.go:641] ["create changefeed failed, retry later"] [changefeed=financial-app-sdb-01-task] [error="fail to open MySQL connection: [CDC:ErrMySQLConnectionError]Error 1227: Access denied; you need (at least one of) the SUPER privilege(s) for this operation"] [errorVerbose="[CDC:ErrMySQLConnectionError]Error 1227: Access denied; you need (at least one of) the SUPER privilege(s) for this operation\ngithub.com/pingcap/errors.AddStack\n\tgithub.com/pingcap/errors@v0.11.5-0.20201126102027-b0a155152ca3/errors.go:174\ngithub.com/pingcap/errors.(*Error).GenWithStackByCause\n\tgithub.com/pingcap/errors@v0.11.5-0.20201126102027-b0a155152ca3/normalize.go:279\ngithub.com/pingcap/ticdc/pkg/errors.WrapError\n\tgithub.com/pingcap/ticdc@/pkg/errors/helper.go:28\ngithub.com/pingcap/ticdc/cdc/sink.getDBConn\n\tgithub.com/pingcap/ticdc@/cdc/sink/mysql.go:537\ngithub.com/pingcap/ticdc/cdc/sink.newMySQLSink\n\tgithub.com/pingcap/ticdc@/cdc/sink/mysql.go:597\ngithub.com/pingcap/ticdc/cdc/sink.init.1.func2\n\tgithub.com/pingcap/ticdc@/cdc/sink/sink.go:72\ngithub.com/pingcap/ticdc/cdc/sink.NewSink\n\tgithub.com/pingcap/ticdc@/cdc/sink/sink.go:113\ngithub.com/pingcap/ticdc/cdc.(*Owner).newChangeFeed\n\tgithub.com/pingcap/ticdc@/cdc/owner.go:414\ngithub.com/pingcap/ticdc/cdc.(*Owner).loadChangeFeeds\n\tgithub.com/pingcap/ticdc@/cdc/owner.go:615\ngithub.com/pingcap/ticdc/cdc.(*Owner).run\n\tgithub.com/pingcap/ticdc@/cdc/owner.go:1309\ngithub.com/pingcap/ticdc/cdc.(*Owner).Run\n\tgithub.com/pingcap/ticdc@/cdc/owner.go:1204\ngithub.com/pingcap/ticdc/cdc.(*Server).campaignOwnerLoop\n\tgithub.com/pingcap/ticdc@/cdc/server.go:172\ngithub.com/pingcap/ticdc/cdc.(*Server).run.func1\n\tgithub.com/pingcap/ticdc@/cdc/server.go:255\ngolang.org/x/sync/errgroup.(*Group).Go.func1\n\tgolang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9/errgroup/errgroup.go:57\nruntime.goexit\n\truntime/asm_amd64.s:1357\nfail to open MySQL connection"
```

## Resolution

* 回退至 v4.0.11 或 v5.0.0 版本
* 升级至 v4.0.13 或 v5.0.2 版本

## Workaround

N/A

## Affect Version(optional)

v4.0.12、v5.0.1