You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2021/06/01 16:36:04 UTC

[GitHub] [airflow] zachliu opened a new issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

zachliu opened a new issue #16202:
URL: https://github.com/apache/airflow/issues/16202


   **Apache Airflow version**: 2.1.0
   
   **Browsers**: Chrome and Firefox
   
   **What happened**:
   
   Before upgrading to 2.1.0
   
   ![before](https://user-images.githubusercontent.com/14293802/120359517-c1ca1100-c2d5-11eb-95ba-58ccc0a3ac37.png)
   
   After upgrading to 2.1.0
   
   ![after](https://user-images.githubusercontent.com/14293802/120359528-c4c50180-c2d5-11eb-8e04-f34846ea2736.png)
   
   **What you expected to happen**:
   
   Show/Edit/Delete under Security -> Users are available
   
   <!-- What do you think went wrong? -->
   
   **How to reproduce it**:
   
   Go to Security -> Users (as an admin of course) 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] zachliu commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

zachliu commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-852418282


   @bbovenzi For production, we have Airflow running as three ECS services: webserver, scheduler, worker.
   Each has its own ECS task(s) and underlying image. Our `AUTH_TYPE` is `AUTH_OAUTH` (google_auth)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] kaxil edited a comment on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

kaxil edited a comment on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-878240119






-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] flolas edited a comment on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

flolas edited a comment on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-853257336


   I'm having the same issue with UserLDAPModelView (LDAP auth) the Admin role has permission for editing
   ```
   can add on UserLDAPModelView, 
   can list on UserLDAPModelView, 
   can delete on UserLDAPModelView, 
   can download on UserLDAPModelView, 
   can edit on UserLDAPModelView, 
   can show on UserLDAPModelView, 
   userinfoedit on UserLDAPModelView
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] jhtimmins commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

jhtimmins commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-886347177


   Thanks for the update. I'll have a fix for this in 2.1.3 going out early next week.
   
   Sent from my iPhone
   
   > On Jul 25, 2021, at 8:31 PM, Pin Jin ***@***.***> wrote:
   > 
   > 
   > I am having the same issue, we have just upgraded from airflow v1.10.15 to airflow v2.1.2, everything has been fine except, as an admin the add/create user + button is no longer available, Below is what I have found the clean airflow v2.1.2 image creates those 6 ab_permissions whereas in our environment, we have alot of ab_permissions
   > 
   >  id |    name     
   > ----+-------------
   >   1 | can_edit
   >   2 | can_read
   >   3 | can_create
   >   4 | can_delete
   >   5 | menu_access
   >   6 | can_get
   > (6 rows)
   > limited to 10 for comparison
   > 
   > airflow=>  select * from ab_permission limit 10;
   >  id |     name     
   > ----+--------------
   >   4 | can_list
   >   5 | can_edit
   >   6 | can_download
   >   7 | can_add
   >   8 | can_delete
   >   9 | can_show
   >  10 | userinfoedit
   >  11 | menu_access
   >  12 | copyrole
   >  14 | can_get
   > (10 rows)
   > I then tried airflow sync-perm
   > 
   > ***@***.***:/opt/airflow$ airflow sync-perm
   > [2021-07-26 02:49:07,338] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists My Profile.userinfoedit Admin
   > [2021-07-26 02:49:07,844] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_create Admin
   > [2021-07-26 02:49:07,850] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_edit Admin
   > [2021-07-26 02:49:07,927] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_delete Admin
   > [2021-07-26 02:49:08,939] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_elasticsearch Admin
   > [2021-07-26 02:49:09,026] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_pickle_info Admin
   > [2021-07-26 02:49:09,032] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task Admin
   > [2021-07-26 02:49:09,038] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_refresh Admin
   > [2021-07-26 02:49:09,123] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_blocked Admin
   > [2021-07-26 02:49:09,129] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_run Admin
   > [2021-07-26 02:49:09,136] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dag_stats Admin
   > [2021-07-26 02:49:09,142] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dag_details Admin
   > [2021-07-26 02:49:09,222] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_tries Admin
   > [2021-07-26 02:49:09,228] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_get_logs_with_metadata Admin
   > [2021-07-26 02:49:09,234] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_landing_times Admin
   > [2021-07-26 02:49:09,240] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_trigger Admin
   > [2021-07-26 02:49:09,245] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_failed Admin
   > [2021-07-26 02:49:09,328] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_graph Admin
   > [2021-07-26 02:49:09,334] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_last_dagruns Admin
   > [2021-07-26 02:49:09,340] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_paused Admin
   > [2021-07-26 02:49:09,346] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_index Admin
   > [2021-07-26 02:49:09,425] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_failed Admin
   > [2021-07-26 02:49:09,432] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_success Admin
   > [2021-07-26 02:49:09,438] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task_instances Admin
   > [2021-07-26 02:49:09,443] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_tree Admin
   > [2021-07-26 02:49:09,525] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task_stats Admin
   > [2021-07-26 02:49:09,531] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_gantt Admin
   > [2021-07-26 02:49:09,537] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_success Admin
   > [2021-07-26 02:49:09,543] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_xcom Admin
   > [2021-07-26 02:49:09,549] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_log Admin
   > [2021-07-26 02:49:09,628] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_delete Admin
   > [2021-07-26 02:49:09,635] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_extra_links Admin
   > [2021-07-26 02:49:09,640] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_clear Admin
   > [2021-07-26 02:49:09,646] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_duration Admin
   > [2021-07-26 02:49:09,727] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_clear Admin
   > [2021-07-26 02:49:09,736] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_rendered Admin
   > [2021-07-26 02:49:09,744] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_code Admin
   > [2021-07-26 02:49:09,930] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists DAG Runs.clear Admin
   > /home/airflow/.local/lib/python3.6/site-packages/airflow/plugins_manager.py:239 DeprecationWarning: This decorator is deprecated.
   > In previous versions, all subclasses of BaseOperator must use apply_default decorator for the`default_args` feature to work properly.
   > In current version, it is optional. The decorator is applied automatically using the metaclass.
   > Updating actions and resources for all existing roles
   > [2021-07-26 02:49:15,437] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists My Profile.userinfoedit Admin
   > [2021-07-26 02:49:15,541] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_create Admin
   > [2021-07-26 02:49:15,547] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_edit Admin
   > [2021-07-26 02:49:15,552] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_delete Admin
   > [2021-07-26 02:49:15,655] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_elasticsearch Admin
   > [2021-07-26 02:49:15,727] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_pickle_info Admin
   > [2021-07-26 02:49:15,733] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task Admin
   > [2021-07-26 02:49:15,740] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_refresh Admin
   > [2021-07-26 02:49:15,747] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_blocked Admin
   > [2021-07-26 02:49:15,755] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_run Admin
   > [2021-07-26 02:49:15,824] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dag_stats Admin
   > [2021-07-26 02:49:15,832] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dag_details Admin
   > [2021-07-26 02:49:16,137] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_tries Admin
   > [2021-07-26 02:49:16,144] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_get_logs_with_metadata Admin
   > [2021-07-26 02:49:16,150] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_landing_times Admin
   > [2021-07-26 02:49:16,156] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_trigger Admin
   > [2021-07-26 02:49:16,162] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_failed Admin
   > [2021-07-26 02:49:16,168] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_graph Admin
   > [2021-07-26 02:49:16,174] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_last_dagruns Admin
   > [2021-07-26 02:49:16,180] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_paused Admin
   > [2021-07-26 02:49:16,186] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_index Admin
   > [2021-07-26 02:49:16,191] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_failed Admin
   > [2021-07-26 02:49:16,197] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_success Admin
   > [2021-07-26 02:49:16,203] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task_instances Admin
   > [2021-07-26 02:49:16,208] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_tree Admin
   > [2021-07-26 02:49:16,214] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task_stats Admin
   > [2021-07-26 02:49:16,228] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_gantt Admin
   > [2021-07-26 02:49:16,233] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_success Admin
   > [2021-07-26 02:49:16,239] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_xcom Admin
   > [2021-07-26 02:49:16,244] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_log Admin
   > [2021-07-26 02:49:16,251] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_delete Admin
   > [2021-07-26 02:49:16,258] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_extra_links Admin
   > [2021-07-26 02:49:16,263] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_clear Admin
   > [2021-07-26 02:49:16,269] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_duration Admin
   > [2021-07-26 02:49:16,274] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_clear Admin
   > [2021-07-26 02:49:16,285] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_rendered Admin
   > [2021-07-26 02:49:16,291] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_code Admin
   > [2021-07-26 02:49:16,308] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists DAG Runs.clear Admin
   > —
   > You are receiving this because you were mentioned.
   > Reply to this email directly, view it on GitHub, or unsubscribe.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] evanhlavaty edited a comment on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

evanhlavaty edited a comment on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-852423224


   @bbovenzi I am having this exact issue as well. We are running in a in house kubernetes cluster. Let me know if you need other info other than this.
   
   dockerhub image tag: tried both 2.1.0 and 2.1.0-python3.8
   K8 Version: 1.19.7
   AUTH_TYPE = AUTH_LDAP
   KubernetesExecutor
   Postgres Metadata DB: 11.7
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] jhtimmins commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

jhtimmins commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-857892531


   Thanks for reporting y'all, I'll take a look


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] ashb commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

ashb commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-853108748


   I wonder if this is caused by something about the permissions refactor and lacking the permission for non DbUser models.
   
   One for you @jhtimmins I think.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] jedcunningham commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

jedcunningham commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-877500907


   Also reported over at FAB: https://github.com/dpgaspar/Flask-AppBuilder/issues/1667


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] pcristinel commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

pcristinel commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-856508758


   Same issue here. It only happens when using Google Oauth. If the user is created manually using the UI this problem doesn't happen.
   
   Browsers: Chrome and Firefox
   We use GCP as our Cloud Provider and airflow is deployed as containers using local Redis and external PostgreSQL database.
   Executor: CeleryExecutor


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] pindge commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

pindge commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-886345576


   I am having the same issue, we have just upgraded from airflow v1.10.15 to airflow v2.1.2, everything has been fine except, as an admin the add/create user + button is no longer available, Below is what I have found the clean airflow v2.1.2 image creates those 6 `ab_permissions` whereas in our environment, we have alot of `ab_permissions`
   ```airflow=# select * from ab_permission;
    id |    name     
   ----+-------------
     1 | can_edit
     2 | can_read
     3 | can_create
     4 | can_delete
     5 | menu_access
     6 | can_get
   (6 rows)
   ```
   limited to 10 for comparison
   ```
   airflow=>  select * from ab_permission limit 10;
    id |     name     
   ----+--------------
     4 | can_list
     5 | can_edit
     6 | can_download
     7 | can_add
     8 | can_delete
     9 | can_show
    10 | userinfoedit
    11 | menu_access
    12 | copyrole
    14 | can_get
   (10 rows)
   ```
   I then tried airflow sync-perm
   ```
   airflow@airflow-scheduler-57748b79b5-vtngw:/opt/airflow$ airflow sync-perm
   [2021-07-26 02:49:07,338] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists My Profile.userinfoedit Admin
   [2021-07-26 02:49:07,844] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_create Admin
   [2021-07-26 02:49:07,850] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_edit Admin
   [2021-07-26 02:49:07,927] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_delete Admin
   [2021-07-26 02:49:08,939] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_elasticsearch Admin
   [2021-07-26 02:49:09,026] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_pickle_info Admin
   [2021-07-26 02:49:09,032] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task Admin
   [2021-07-26 02:49:09,038] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_refresh Admin
   [2021-07-26 02:49:09,123] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_blocked Admin
   [2021-07-26 02:49:09,129] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_run Admin
   [2021-07-26 02:49:09,136] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dag_stats Admin
   [2021-07-26 02:49:09,142] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dag_details Admin
   [2021-07-26 02:49:09,222] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_tries Admin
   [2021-07-26 02:49:09,228] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_get_logs_with_metadata Admin
   [2021-07-26 02:49:09,234] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_landing_times Admin
   [2021-07-26 02:49:09,240] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_trigger Admin
   [2021-07-26 02:49:09,245] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_failed Admin
   [2021-07-26 02:49:09,328] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_graph Admin
   [2021-07-26 02:49:09,334] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_last_dagruns Admin
   [2021-07-26 02:49:09,340] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_paused Admin
   [2021-07-26 02:49:09,346] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_index Admin
   [2021-07-26 02:49:09,425] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_failed Admin
   [2021-07-26 02:49:09,432] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_success Admin
   [2021-07-26 02:49:09,438] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task_instances Admin
   [2021-07-26 02:49:09,443] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_tree Admin
   [2021-07-26 02:49:09,525] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task_stats Admin
   [2021-07-26 02:49:09,531] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_gantt Admin
   [2021-07-26 02:49:09,537] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_success Admin
   [2021-07-26 02:49:09,543] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_xcom Admin
   [2021-07-26 02:49:09,549] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_log Admin
   [2021-07-26 02:49:09,628] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_delete Admin
   [2021-07-26 02:49:09,635] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_extra_links Admin
   [2021-07-26 02:49:09,640] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_clear Admin
   [2021-07-26 02:49:09,646] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_duration Admin
   [2021-07-26 02:49:09,727] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_clear Admin
   [2021-07-26 02:49:09,736] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_rendered Admin
   [2021-07-26 02:49:09,744] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_code Admin
   [2021-07-26 02:49:09,930] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists DAG Runs.clear Admin
   /home/airflow/.local/lib/python3.6/site-packages/airflow/plugins_manager.py:239 DeprecationWarning: This decorator is deprecated.
   In previous versions, all subclasses of BaseOperator must use apply_default decorator for the`default_args` feature to work properly.
   In current version, it is optional. The decorator is applied automatically using the metaclass.
   Updating actions and resources for all existing roles
   [2021-07-26 02:49:15,437] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists My Profile.userinfoedit Admin
   [2021-07-26 02:49:15,541] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_create Admin
   [2021-07-26 02:49:15,547] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_edit Admin
   [2021-07-26 02:49:15,552] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists View Menus.can_delete Admin
   [2021-07-26 02:49:15,655] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_elasticsearch Admin
   [2021-07-26 02:49:15,727] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_pickle_info Admin
   [2021-07-26 02:49:15,733] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task Admin
   [2021-07-26 02:49:15,740] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_refresh Admin
   [2021-07-26 02:49:15,747] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_blocked Admin
   [2021-07-26 02:49:15,755] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_run Admin
   [2021-07-26 02:49:15,824] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dag_stats Admin
   [2021-07-26 02:49:15,832] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dag_details Admin
   [2021-07-26 02:49:16,137] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_tries Admin
   [2021-07-26 02:49:16,144] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_get_logs_with_metadata Admin
   [2021-07-26 02:49:16,150] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_landing_times Admin
   [2021-07-26 02:49:16,156] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_trigger Admin
   [2021-07-26 02:49:16,162] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_failed Admin
   [2021-07-26 02:49:16,168] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_graph Admin
   [2021-07-26 02:49:16,174] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_last_dagruns Admin
   [2021-07-26 02:49:16,180] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_paused Admin
   [2021-07-26 02:49:16,186] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_index Admin
   [2021-07-26 02:49:16,191] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_failed Admin
   [2021-07-26 02:49:16,197] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_success Admin
   [2021-07-26 02:49:16,203] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task_instances Admin
   [2021-07-26 02:49:16,208] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_tree Admin
   [2021-07-26 02:49:16,214] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_task_stats Admin
   [2021-07-26 02:49:16,228] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_gantt Admin
   [2021-07-26 02:49:16,233] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_success Admin
   [2021-07-26 02:49:16,239] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_xcom Admin
   [2021-07-26 02:49:16,244] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_log Admin
   [2021-07-26 02:49:16,251] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_delete Admin
   [2021-07-26 02:49:16,258] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_extra_links Admin
   [2021-07-26 02:49:16,263] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_dagrun_clear Admin
   [2021-07-26 02:49:16,269] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_duration Admin
   [2021-07-26 02:49:16,274] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_clear Admin
   [2021-07-26 02:49:16,285] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_rendered Admin
   [2021-07-26 02:49:16,291] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists Airflow.can_code Admin
   [2021-07-26 02:49:16,308] {manager.py:565} WARNING - Refused to delete permission view, assoc with role exists DAG Runs.clear Admin
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] KIRY4 commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

KIRY4 commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-866070824


   Same issue. Airflow on AKS with AD (LDAP) integration. Buttons are disappeared in 2.1.0.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] kaxil commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

kaxil commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-878240119






-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] ashb commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

ashb commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-879731311


   @jhtimmins Could this be related to your permissions renaming? (I'm not sure how much of that made it in to 2.1.0 vs main for 2.2.0)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] zachliu edited a comment on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

zachliu edited a comment on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-852418282


   @bbovenzi For production, we have Airflow running as three ECS services: webserver, scheduler, worker.
   Each has its own ECS task(s) and underlying image.
   `AUTH_TYPE` = `AUTH_OAUTH` (google_auth)
   executor = CeleryExecutor
   broker = redis (ElastiCache)
   db = postgrsql 12.4
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] bbovenzi commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

bbovenzi commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-852409562


   @zachliu Could you provide more details on how you're running Airflow? I see others have this issue, but I haven't been able to replicate it yet.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] flolas commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

flolas commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-853257336


   I'm having the same issue with UserLDAPModelView (LDAP auth) the Admin role has permission for editing


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] flolas edited a comment on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

flolas edited a comment on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-853257336


   I'm having the same issue with UserLDAPModelView (LDAP auth) the Admin role has permission for editing
   ```
   can add on UserLDAPModelView, 
   can list on UserLDAPModelView, 
   can delete on UserLDAPModelView, 
   can download on UserLDAPModelView, 
   can edit on UserLDAPModelView, 
   can show on UserLDAPModelView, 
   userinfoedit on UserLDAPModelView```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] akotuc commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

akotuc commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-857699735


   Having the same issue - if a new database is created for v2.1 permissions are fine however after upgrade from 1.10.15 there are missing `can edit`, `can delete`, `can create` permissions for `User` view/menu.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] zachliu edited a comment on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

zachliu edited a comment on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-852418282


   @bbovenzi For production, we have Airflow running as three ECS services: webserver, scheduler, worker.
   Each has its own ECS task(s) and underlying image.
   AUTH_TYPE = AUTH_OAUTH (google_auth)
   executor = CeleryExecutor
   broker = redis (ElastiCache)
   db = postgrsql 12.4
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] SamiRehmanNostra edited a comment on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

SamiRehmanNostra edited a comment on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-866506425

I just raised the exact same issue, I'll delete my issue but I'll leave the details here:

**Apache Airflow version**: 2.1.

**Environment**: Ubuntu 20.04

- **Cloud provider or hardware configuration**: AWS
- **OS** (e.g. from /etc/os-release): UBUNTU 20.04 LTS
- **Kernel** (e.g. `uname -a`): Linux 20.04.1-Ubuntu SMP Tue Jun 1 09:54:15 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
- **Install tools**: python and pip

**What happened**: After performing the upgrade from 2.0.2 to 2.10 using the guide available in the documentation, Airflow upgraded successfully, a few things that aren't working as expected are Dag Dependency page and Admin List users function.
The DAG dependency page doesn't show the dependency at all and the List Users function has the Create/Edit users option removed even though I have Admin role assigned to my user. I am use LDAP as the method of authenticating.

**What you expected to happen**: Expected the Admin page to allow me to edit and add new users

**How to reproduce it**: Its reproduced by opening these pages every time. After the upgrade I lost the UI button for creating and editing users.

![List Users page](https://user-images.githubusercontent.com/43160555/123028023-16b6fe00-d422-11eb-8d56-2ab3373ca784.png)

![Dag Dependency Page](https://user-images.githubusercontent.com/43160555/123028222-6eee0000-d422-11eb-9664-a8c0ee2a6723.png)

How often does this problem occur? Once? Every time etc?
Every time

Any relevant logs to include? Put them here in side a detail tag:
<details><summary>Upgrade Check Log</summary>

/home/ubuntu/env_airflow/lib/python3.8/site-packages/airflow/configuration.py:34
6 DeprecationWarning: The hide_sensitive_variable_fields option in [admin] has been moved to the hide_sensitive_var_conn_fields option in [core] - the old setting has been used, but please update your config.
/home/ubuntu/env_airflow/lib/python3.8/site-packages/airflow/configuration.py:34
6 DeprecationWarning: The default_queue option in [celery] has been moved to the default_queue option in [operators] - the old setting has been used, but please update your config.
/home/ubuntu/env_airflow/lib/python3.8/site-packages/airflow/plugins_manager.py:
239 DeprecationWarning: This decorator is deprecated.In previous versions, all subclasses of BaseOperator must use apply_default decorator for the`default_args` feature to work properly.
In current version, it is optional. The decorator is applied automatically using the metaclass.
/home/ubuntu/env_airflow/lib/python3.8/site-packages/airflow/configuration.py:34
6 DeprecationWarning: The default_queue option in [celery] has been moved to the default_queue option in [operators] - the old setting has been used, but please update your config.

</details>

--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] evanhlavaty commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

evanhlavaty commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-852423224


   @bbovenzi I am having this exact issue as well. We are running in a in house kubernetes cluster. Let me know if you need other info other than this.
   
   dockerhub image tag: tried both 2.1.0 and 2.1.0-python3.8
   K8 Version: 1.19.7
   AUTH_TYPE = AUTH_LDAP
   Postgres Metadata DB: 11.7
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] kaxil closed issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

kaxil closed issue #16202:
URL: https://github.com/apache/airflow/issues/16202


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] SamiRehmanNostra edited a comment on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

SamiRehmanNostra edited a comment on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-866506425

I just raised the exact same issue, I'll delete my issue but I'll leave the details here:

**Apache Airflow version**: 2.1.

**Environment**: Ubuntu 20.04

**What you expected to happen**: Expected the Admin page to allow me to edit and add new users

**How to reproduce it**: Its reproduced by opening these pages every time. After the upgrade I lost the UI button for creating and editing users.

![List Users page](https://user-images.githubusercontent.com/43160555/123028023-16b6fe00-d422-11eb-8d56-2ab3373ca784.png)

How often does this problem occur? Once? Every time etc?
Every time

Any relevant logs to include? Put them here in side a detail tag:
<details><summary>Upgrade Check Log</summary>

</details>

--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] SamiRehmanNostra commented on issue #16202: Missing Show/Edit/Delete under Security -> Users in 2.1.0

Posted by GitBox <gi...@apache.org>.

SamiRehmanNostra commented on issue #16202:
URL: https://github.com/apache/airflow/issues/16202#issuecomment-866506425

I just raised the exact same issue, I'll delete my issue but I'll leave the details here:

**Apache Airflow version**: 2.1.

**Environment**: Ubuntu 20.04

**What you expected to happen**: I expected the dag dependency page to show the dags and their dependency in a Graph view and didn't expect to lose control on editing users in the List Users page.

**How to reproduce it**: Its reproduced by opening these pages every time. After the upgrade I lost the UI button for creating and editing users.

![List Users page](https://user-images.githubusercontent.com/43160555/123028023-16b6fe00-d422-11eb-8d56-2ab3373ca784.png)

![Dag Dependency Page](https://user-images.githubusercontent.com/43160555/123028222-6eee0000-d422-11eb-9664-a8c0ee2a6723.png)

How often does this problem occur? Once? Every time etc?
Every time

Any relevant logs to include? Put them here in side a detail tag:
<details><summary>Upgrade Check Log</summary>

</details>

--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org