potiuk commented on pull request #18670:
URL: https://github.com/apache/airflow/pull/18670#issuecomment-933181013


   Yep. I believe (from those discussions - i am not FAB expert) this is what  
`AUTH_USER_REGISTRATION=False' does.
   
   
https://flask-appbuilder.readthedocs.io/en/latest/security.html#authentication-methods
   
   It allows the users to self-register. So (providing that I understand it 
correctly), this is perfectly valid case where the users can be manually added 
via admin rather than self-register. 
   
   That was.much more useful of course when there was no automated role 
synchronisation (because then you had to manually assign the users to roles if 
you wanted some people to have different roles.i Fab 3.2 i believe this was 
changed and you can assign people to roles based on LDAP groups so you do not 
have to manage the users via Airflow UI at all and LDAP might become a.single 
source of truth. 
   
   But i believe not everyone in their corporate organisation has influence on 
how groups are defined in LDAP and being able to manually control who has 
access to Airflow with what role without having to create and configure LDAPl 
groups for authorisation while still authenticating using LDAP seems like very 
valid case (at least that what came out of our discussion with @dstandish  and 
the user above).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to