You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2021/08/18 15:03:43 UTC
[GitHub] [airflow] kn6405 opened a new issue #17684: Role permissions and displaying dag load errors on webserver UI
kn6405 opened a new issue #17684:
URL: https://github.com/apache/airflow/issues/17684
Running Airflow 2.1.2. Setup using oauth authentication (azure). With public permissions if a user did not have a valid role in Azure AD I got all sorts of redirect loops and errors. So I updated the public permissions to: [can read on Website, menu access on My Profile, can read on My Profile, menu access on Documentation, menu access on Docs]. I also added a group to my Azure AD with the role public that includes all users in the subscription.
This allows a user to see the Web UI page with the logic button. And if they login they get the same permissions as when not logged in. The only thing that I noticed is if there are dag errors if seems like the "can read on Website" display dag load errors and some of these dags and errors I might not want a user to see.
I'm wondering if this is an issue or more of something that should be a new feature? Cause if I can't view the dag should I be able to view the errors for it? Like adding a role "can read on Website Errors" or just tie these errors into permissions that they are related to like can view one of the dags permissions.
Logged in as user:
Not logged in (gets customized "Public" permissions):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kaxil closed issue #17684: Role permissions and displaying dag load errors on webserver UI
Posted by GitBox <gi...@apache.org>.
kaxil closed issue #17684:
URL: https://github.com/apache/airflow/issues/17684
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] jedcunningham commented on issue #17684: Role permissions and displaying dag load errors on webserver UI
Posted by GitBox <gi...@apache.org>.
jedcunningham commented on issue #17684:
URL: https://github.com/apache/airflow/issues/17684#issuecomment-905944084
Thanks again for the report @kn6405, the fix will be in 2.2.0.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] jedcunningham commented on issue #17684: Role permissions and displaying dag load errors on webserver UI
Posted by GitBox <gi...@apache.org>.
jedcunningham commented on issue #17684:
URL: https://github.com/apache/airflow/issues/17684#issuecomment-901256265
Thanks for the report. I think bug is appropriate.
Btw, the redirect loop you ran into should be fixed in 2.2.0: https://github.com/apache/airflow/pull/17613
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org