Jorricks commented on pull request #18438:
URL: https://github.com/apache/airflow/pull/18438#issuecomment-925682281


   There is a security issue here.
   People will be able to delete TaskInstances that the person should not have 
access too.
   You would just need to change the post values with a primary_key of another 
TaskInstance you don't have access too.
   Therefore, please add the `@action_has_dag_edit_access` decorator.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to