kn6405 opened a new issue #17684:
URL: https://github.com/apache/airflow/issues/17684


   Running Airflow 2.1.2. Setup using oauth authentication (azure). With public 
permissions if a user did not have a valid role in Azure AD I got all sorts of 
redirect loops and errors. So I updated the public permissions to: [can read on 
Website, menu access on My Profile, can read on My Profile, menu access on 
Documentation, menu access on Docs]. I also added a group to my Azure AD with 
the role public that includes all users in the subscription.
   
   This allows a user to see the Web UI page with the logic button. And if they 
login they get the same permissions as when not logged in. The only thing that 
I noticed is if there are dag errors if seems like the "can read on Website" 
display dag load errors and some of these dags and errors I might not want a 
user to see. 
   
   I'm wondering if this is an issue or more of something that should be a new 
feature? Cause if I can't view the dag should I be able to view the errors for 
it? Like adding a role "can read on Website Errors" or just tie these errors 
into permissions that they are related to like can view one of the dags 
permissions.  
   
   Logged in as user:
   
![image](https://user-images.githubusercontent.com/83670736/129920518-a104de5d-0b63-4ff6-8fcb-8dded1dee5f4.png)
   
   Not logged in (gets customized "Public" permissions):
   
![image](https://user-images.githubusercontent.com/83670736/129922067-e0da80fb-f6ab-44fc-80ea-9b9c7f685bb2.png)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to