potiuk commented on pull request #18670: URL: https://github.com/apache/airflow/pull/18670#issuecomment-933181013
Yep. I believe (from those discussions - i am not FAB expert) this is what `AUTH_USER_REGISTRATION=False' does. https://flask-appbuilder.readthedocs.io/en/latest/security.html#authentication-methods It allows the users to self-register. So (providing that I understand it correctly), this is perfectly valid case where the users can be manually added via admin rather than self-register. That was.much more useful of course when there was no automated role synchronisation (because then you had to manually assign the users to roles if you wanted some people to have different roles.i Fab 3.2 i believe this was changed and you can assign people to roles based on LDAP groups so you do not have to manage the users via Airflow UI at all and LDAP might become a.single source of truth. But i believe not everyone in their corporate organisation has influence on how groups are defined in LDAP and being able to manually control who has access to Airflow with what role without having to create and configure LDAPl groups for authorisation while still authenticating using LDAP seems like very valid case (at least that what came out of our discussion with @dstandish and the user above). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
