jhtimmins opened a new pull request #13922: URL: https://github.com/apache/airflow/pull/13922
From 1.10.x -> 2.0, the required permissions to trigger a dag have changed from DAG.can_edit to DAG.can_read + DagRun.can_create. Since the Viewer role has `DAG.can_read` by default, it isn't possible to give a Viewer trigger access to a single DAG without giving access to all DAGs. This fixes that discrepancy by making the trigger requirement DAG.can_edit + DagRun.can_create. Now, to trigger a DAG, a viewer will need to be given both permissions, as neither is with the Viewer role by default. This PR also hides the Trigger/Refresh buttons on the home page if the user doesn't have permission to perform those actions. closes: #13891 related: #13891 ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
