Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add per-DAG delete permissions #21938

Merged
merged 6 commits into from
Mar 4, 2022
Merged

Conversation

blag
Copy link
Contributor

@blag blag commented Mar 2, 2022

This PR adds per-DAG delete permissions and extends the sync-perms subcommand to add delete permissions to the database for all existing DAGs (it does not, however, grant any of the new DAG delete permissions to any roles).

TODO:

  • Tests
  • Documentation

@boring-cyborg boring-cyborg bot added the area:webserver Webserver related Issues label Mar 2, 2022
@mik-laj
Copy link
Member

mik-laj commented Mar 2, 2022

Can you update docs?
https://airflow.apache.org/docs/apache-airflow/stable/security/access-control.html#dag-level-permissions

airflow/www/views.py Outdated Show resolved Hide resolved
Copy link
Member

@kaxil kaxil left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approach looks good to me

@blag blag force-pushed the dag-level-delete-perms branch 2 times, most recently from b2c2031 to 2f18b80 Compare March 3, 2022 10:21
@blag
Copy link
Contributor Author

blag commented Mar 3, 2022

@mik-laj Can you be more specific with that you'd like me to document here? As far as I can tell, this PR is really just making delete permissions behave the way they are already implied by the documentation to behave.

@blag blag marked this pull request as ready for review March 3, 2022 10:50
@blag blag changed the title RFC: Add per-DAG delete permissions Add per-DAG delete permissions Mar 3, 2022
@kaxil kaxil requested a review from jedcunningham March 4, 2022 00:25
@blag blag force-pushed the dag-level-delete-perms branch from 2f18b80 to 749205b Compare March 4, 2022 09:29
@blag blag force-pushed the dag-level-delete-perms branch from 1bdaaf1 to 59a6f4b Compare March 4, 2022 18:55
@kaxil kaxil merged commit 28e3d65 into apache:main Mar 4, 2022
@kaxil kaxil deleted the dag-level-delete-perms branch March 4, 2022 20:19
@ephraimbuddy ephraimbuddy added the type:bug-fix Changelog: Bug Fixes label Apr 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:webserver Webserver related Issues type:bug-fix Changelog: Bug Fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants