You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2021/09/23 10:19:08 UTC

[GitHub] [airflow] Jorricks commented on pull request #18438: Add muldelete action to TaskInstanceModelView and tests. Change permissions for TaskInstanceModelView.action_clear to "delete"

Jorricks commented on pull request #18438:
URL: https://github.com/apache/airflow/pull/18438#issuecomment-925682281


   There is a security issue here.
   People will be able to delete TaskInstances that the person should not have access too.
   You would just need to change the post values with a primary_key of another TaskInstance you don't have access too.
   Therefore, please add the `@action_has_dag_edit_access` decorator.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org