You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "YakshaB (via GitHub)" <gi...@apache.org> on 2025/01/18 18:29:46 UTC
[D] Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags) [airflow]
GitHub user YakshaB created a discussion: Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags)
I have found below statement in the access control documentation
https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/access-control.html
`
Trigger DAG run | DAGs.can_edit, DAG Runs.can_create
`
but If I give dags.can_edit, user can also get pause/unpause permission, can we restrict this ?
GitHub link: https://github.com/apache/airflow/discussions/45780
----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org
Re: [D] Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags) [airflow]
Posted by "YakshaB (via GitHub)" <gi...@apache.org>.
GitHub user YakshaB edited a comment on the discussion: Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags)
Thank you, @potiuk , for responding.
Is there any other way to achieve this? Earlier, there was a similar request: https://github.com/apache/airflow/discussions/30121.
Our scenario involves giving access to support engineers, where they should be able to trigger jobs, but they should not be allowed to change or alter DAG behavior (edit, pause, unpause, delete, etc.).
Is this possible with the current roles/permissions that Airflow provides?
GitHub link: https://github.com/apache/airflow/discussions/45780#discussioncomment-11890438
----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org
Re: [D] Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags) [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
GitHub user potiuk added a comment to the discussion: Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags)
No - https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/access-control.html#dag-level-permissions see the pause toggle, it's linked with can_edit.
GitHub link: https://github.com/apache/airflow/discussions/45780#discussioncomment-11876887
----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org
Re: [D] Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags) [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
GitHub user potiuk added a comment to the discussion: Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags)
Not that I am aware of.
GitHub link: https://github.com/apache/airflow/discussions/45780#discussioncomment-11892270
----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org
Re: [D] Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags) [airflow]
Posted by "YakshaB (via GitHub)" <gi...@apache.org>.
GitHub user YakshaB added a comment to the discussion: Is there any specific DAG permission which can only view and trigger dags ? (no unpause/pause/delete operations for dags)
Thank you @potiuk for your respond,
Is there any other way to do / earlier there was an similar req https://github.com/apache/airflow/discussions/30121 ?
Our scenario is giving access to support engineers where there should able to trigger jobs but they should not change/alter DAG behavior (edit/pause/unpause/delete etc) ? Is it possible/not with current roles/permission which airflow have ?
GitHub link: https://github.com/apache/airflow/discussions/45780#discussioncomment-11890438
----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org