[jira] [Updated] (AIRFLOW-3048) (www_rbac) Non-Admin Roles' Access to Pages "Profile", "Edit User", and "Reset my password"

["Aizhamal Nurmamat kyzy (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AIRFLOW-3048?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Aizhamal Nurmamat kyzy updated AIRFLOW-3048:
--------------------------------------------
         Labels: webapp  (was: )
    Component/s:     (was: webapp)
                 ui

Moving to ui component as part of component refactor. Webapp component will be removed.

> (www_rbac) Non-Admin Roles' Access to Pages "Profile", "Edit User", and "Reset my password"
> -------------------------------------------------------------------------------------------
>
>                 Key: AIRFLOW-3048
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-3048
>             Project: Apache Airflow
>          Issue Type: Improvement
>          Components: ui
>    Affects Versions: 1.10.0
>            Reporter: Xiaodong DENG
>            Priority: Minor
>              Labels: webapp
>         Attachments: attachment 1.png, attachment 2.png
>
>
> In the *www_rbac* app, at the top right corner, users can click to access "_*Profile*_" page, and in that page users are able to check their own profile, and further, they can change their own profile via _*Edit User*_ (last and first name) and reset their OWN password ("*Reset my password*").
> However, in the current version (both 1.10 and master branch), the *default* role-view-permission only allows Admin roles to access this page.
> Of course the Admin user can add access to these pages for other roles, but it should not be the case actually (it should be there by default).
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)