jhtimmins opened a new pull request #11362:
URL: https://github.com/apache/airflow/pull/11362


   This PR is part of the "unofficial" epic to replace the current Flask 
Appbuilder permissions with updated, resource-based permissions. Rather than 
assigning access to individual view methods, access is doled out based on the 
data objects and models accessed within the method.
   
   *This PR shouldn't be merged until after #11189*
   
   This epic has three steps, *this is step 2*.
   1. Update the dag-level permissions. Prefixes the DAG resource name with 
`DAG:`, and replaces `can_dag_edit` and `can_dag_read` with `can_read` and 
`can_edit`. https://github.com/apache/airflow/pull/11189
   2. Migrate the Airflow view to use resource-backed permissions. This 
includes creation of a custom `has_access` decorator, deprecation of the 
`has_dag_access`decorator, a migration script to update existing roles to use 
the new permissions, and adding the new `has_access` decorator to the Airflow 
view class's methods.
   3. Migration of the other view classes (beyond the class named Airflow) to 
use resource based permissions.
   
   Related Issues:
   https://github.com/apache/airflow/issues/10469
   https://github.com/apache/airflow/issues/8112


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to