[PR] [v3-2-test] Apply per-DAG audit log permission to event log detail endpoint (#67112) [airflow]

["github-actions[bot] (via GitHub)" <gi...@apache.org>]

github-actions[bot] opened a new pull request, #67159:
URL: https://github.com/apache/airflow/pull/67159

   Align GET /eventLogs/{event_log_id} with the collection endpoint
   GET /eventLogs, which already scopes results to the user's permitted
   Dags via ReadableEventLogsFilterDep. The detail endpoint only enforced
   the generic DagAccessEntity.AUDIT_LOG check via requires_access_dag with
   no dag_id.
   
   Introduce requires_access_event_log, mirroring requires_access_backfill:
   resolve the dag_id from the event log row, then delegate to
   requires_access_dag scoped to that dag_id.
   (cherry picked from commit 4498582dd1ee553c403db5119ddadd7151d6fde1)
   
   Co-authored-by: Pierre Jeambrun <pi...@gmail.com>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [v3-2-test] Apply per-DAG audit log permission to event log detail endpoint (#67112) [airflow]

["pierrejeambrun (via GitHub)" <gi...@apache.org>]

pierrejeambrun merged PR #67159:
URL: https://github.com/apache/airflow/pull/67159


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org