You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Ash Berlin-Taylor (JIRA)" <ji...@apache.org> on 2019/05/01 22:34:00 UTC

[jira] [Resolved] (AIRFLOW-4450) has_dag_access does not handle form parameters

     [ https://issues.apache.org/jira/browse/AIRFLOW-4450?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ash Berlin-Taylor resolved AIRFLOW-4450.
----------------------------------------
    Resolution: Fixed

> has_dag_access does not handle form parameters
> ----------------------------------------------
>
>                 Key: AIRFLOW-4450
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-4450
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: webserver
>    Affects Versions: 1.10.3
>            Reporter: Chris McLennon
>            Assignee: Chris McLennon
>            Priority: Major
>             Fix For: 1.10.4
>
>
> With the update to Airflow 1.10.3, we noticed that users that have permission to clear task instances are no longer able to do so from the webserver, and are receiving an "Access denied" error. They are able to clear task instances from /taskinstance, but not from /clear.
> I believe this is related to the change made in AIRFLOW-4240, which had the unintended side effect of breaking the has_dag_access decorator for POST requests.
> This may affect other endpoints.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)