[jira] [Commented] (AIRFLOW-4450) has_dag_access does not handle form parameters

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AIRFLOW-4450?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16831292#comment-16831292 ] 

ASF GitHub Bot commented on AIRFLOW-4450:
-----------------------------------------

ashb commented on pull request #5220: [AIRFLOW-4450] has_dag_access does not handle form parameters
URL: https://github.com/apache/airflow/pull/5220
 
 
   
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> has_dag_access does not handle form parameters
> ----------------------------------------------
>
>                 Key: AIRFLOW-4450
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-4450
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: webserver
>    Affects Versions: 1.10.3
>            Reporter: Chris McLennon
>            Assignee: Chris McLennon
>            Priority: Major
>             Fix For: 1.10.4
>
>
> With the update to Airflow 1.10.3, we noticed that users that have permission to clear task instances are no longer able to do so from the webserver, and are receiving an "Access denied" error. They are able to clear task instances from /taskinstance, but not from /clear.
> I believe this is related to the change made in AIRFLOW-4240, which had the unintended side effect of breaking the has_dag_access decorator for POST requests.
> This may affect other endpoints.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)