You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Axel Goblet (Jira)" <ji...@apache.org> on 2019/11/26 17:51:00 UTC

[jira] [Updated] (AIRFLOW-6077) airflow RBAC security not working when hosting multiple instances on same address

     [ https://issues.apache.org/jira/browse/AIRFLOW-6077?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Axel Goblet updated AIRFLOW-6077:
---------------------------------
    Description: 
Airflow offers password protection when setting config AIRFLOW__WEBSERVER_RBAC=True.

When hosting multiple instances on the same machine / address, on different ports (using AIRFLOW___WEBSERVER___WEB_SERVER_PORT config), logging in to one system grants you access to the other system as well, even if passwords differ.

  was:
Airflow offers password protection when setting config AIRFLOW__WEBSERVER_RBAC=True.

When hosting multiple instances on the same machine / address, on different ports (using AIRFLOW__WEBSERVER__WEB_SERVER_PORT config), logging in to one system grants you access to the other system as well, even if passwords differ.


> airflow RBAC security not working when hosting multiple instances on same address
> ---------------------------------------------------------------------------------
>
>                 Key: AIRFLOW-6077
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-6077
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 1.10.4
>            Reporter: Axel Goblet
>            Priority: Major
>
> Airflow offers password protection when setting config AIRFLOW__WEBSERVER_RBAC=True.
> When hosting multiple instances on the same machine / address, on different ports (using AIRFLOW___WEBSERVER___WEB_SERVER_PORT config), logging in to one system grants you access to the other system as well, even if passwords differ.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)