You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Kaxil Naik (Jira)" <ji...@apache.org> on 2020/03/16 14:37:00 UTC

[jira] [Updated] (AIRFLOW-7074) [RBAC UI] No Permissions to view SubDAGs

     [ https://issues.apache.org/jira/browse/AIRFLOW-7074?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kaxil Naik updated AIRFLOW-7074:
--------------------------------
    Description: 
There is no granular permission for SubDags at all.

https://github.com/apache/airflow/blob/ae035cdb69c76eb7070629d00ded294510df1214/airflow/www/security.py#L383
https://github.com/apache/airflow/blob/ae035cdb69c76eb7070629d00ded294510df1214/airflow/www/security.py#L407

Currently the only time you would be able to view SubDAGs would be when you can view all DAGs 

---

A question for solving this is "Do we want to grant read permissions to all the SubDags automatically when permissions are added for the Parent DAG"?

Or would we like to add specific permissions for SubDag too?

Check the attachment for a patch to allow adding permissions for a SubDag too. *image (1).png* is the screenshot after applying the patch

  was:
There is no granular permission for SubDags at all.

https://github.com/apache/airflow/blob/ae035cdb69c76eb7070629d00ded294510df1214/airflow/www/security.py#L383
https://github.com/apache/airflow/blob/ae035cdb69c76eb7070629d00ded294510df1214/airflow/www/security.py#L407

Currently the only time you would be able to view SubDAGs would be when you can view all DAGs

---

A question for solving this is "Do we want to grant read permissions to all the SubDags automatically when permissions are added for the Parent DAG"?

Or would we like to add specific permissions for SubDag too?

Check the attachment for a patch to allow adding permissions for a SubDag too. *image (1).png* is the screenshot after applying the patch


> [RBAC UI] No Permissions to view SubDAGs
> ----------------------------------------
>
>                 Key: AIRFLOW-7074
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-7074
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: security, webserver
>    Affects Versions: 1.10.9
>            Reporter: Kaxil Naik
>            Priority: Major
>             Fix For: 2.0.0, 1.10.10
>
>         Attachments: Patch, image (1).png
>
>
> There is no granular permission for SubDags at all.
> https://github.com/apache/airflow/blob/ae035cdb69c76eb7070629d00ded294510df1214/airflow/www/security.py#L383
> https://github.com/apache/airflow/blob/ae035cdb69c76eb7070629d00ded294510df1214/airflow/www/security.py#L407
> Currently the only time you would be able to view SubDAGs would be when you can view all DAGs 
> ---
> A question for solving this is "Do we want to grant read permissions to all the SubDags automatically when permissions are added for the Parent DAG"?
> Or would we like to add specific permissions for SubDag too?
> Check the attachment for a patch to allow adding permissions for a SubDag too. *image (1).png* is the screenshot after applying the patch



--
This message was sent by Atlassian Jira
(v8.3.4#803005)