You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Deepak Parashar (Jira)" <ji...@apache.org> on 2020/03/20 04:52:00 UTC

[jira] [Closed] (AIRFLOW-6848) Can i create the viewer filter in LDAP ad group

     [ https://issues.apache.org/jira/browse/AIRFLOW-6848?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Deepak Parashar closed AIRFLOW-6848.
------------------------------------
    Resolution: Fixed

> Can i create the viewer filter in LDAP ad group 
> ------------------------------------------------
>
>                 Key: AIRFLOW-6848
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-6848
>             Project: Apache Airflow
>          Issue Type: New Feature
>          Components: authentication
>    Affects Versions: 1.10.5, 1.10.8
>            Reporter: Deepak Parashar
>            Assignee: Deepak Parashar
>            Priority: Major
>              Labels: authentication, authorization, ldap
>
> Hi , 
> I am using ad based authentication to access the airflow  in my company , i  have created two groups in ad(ldap) for superuser_filter and data_profiler , i want to create or integrate one group like viewer which can help me to allow only read only access of dags and other system information for the users who are part of this viewer group .
> has someone already did it ?
> group_member_attr = memberOf superuser_filter = memberOf=CN=airflow-super-users,OU=Groups,OU=RWC,OU=US,OU=NORAM,DC=example,DC=com data_profiler_filter = memberOf=CN=airflow-data-profilers,OU=Groups,OU=RWC,OU=US,OU=NORAM,DC=example,DC=com
>  
> like these two above groups , similarly we can create one for viewer .
> if its not already available can someone please help me how can i implement it in the current setup .
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)