You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Ivan Grbavac (Jira)" <ji...@apache.org> on 2021/06/16 06:43:00 UTC

[jira] [Commented] (AIRFLOW-4155) Logging in with Public role triggers infinite redirect loop

    [ https://issues.apache.org/jira/browse/AIRFLOW-4155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17364094#comment-17364094 ] 

Ivan Grbavac commented on AIRFLOW-4155:
---------------------------------------

Ran into the same issue.

When {{Viewer}} is set for the {{AUTH_ROLE_PUBLIC}} setting it worked. Obviously, to much information was shown.

To replicate behavior of 1.10.15 i found that {{can read on Website}} needs to be added to the {{Public}} role.
That will break the redirect cycle.

The same permission is present on the {{Viewer}} role in Airflow 2.1.0, but it does not even exist in default permissions on 1.10.15.

> Logging in with Public role triggers infinite redirect loop
> -----------------------------------------------------------
>
>                 Key: AIRFLOW-4155
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-4155
>             Project: Apache Airflow
>          Issue Type: Improvement
>            Reporter: Andrew Stahlman
>            Assignee: Andrew Stahlman
>            Priority: Major
>
> After a user registers in the PUBLIC_AUTH_ROLE they are redirected to /home. But a user in the Public role still doesn't have view privileges on /home, so they are immediately redirected *back* to the /login page, which creates an endless redirect cycle.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)