[ 
https://issues.apache.org/jira/browse/AIRFLOW-4450?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16831292#comment-16831292
 ] 

ASF GitHub Bot commented on AIRFLOW-4450:
-----------------------------------------

ashb commented on pull request #5220: [AIRFLOW-4450] has_dag_access does not 
handle form parameters
URL: https://github.com/apache/airflow/pull/5220
 
 
   
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


> has_dag_access does not handle form parameters
> ----------------------------------------------
>
>                 Key: AIRFLOW-4450
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-4450
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: webserver
>    Affects Versions: 1.10.3
>            Reporter: Chris McLennon
>            Assignee: Chris McLennon
>            Priority: Major
>             Fix For: 1.10.4
>
>
> With the update to Airflow 1.10.3, we noticed that users that have permission 
> to clear task instances are no longer able to do so from the webserver, and 
> are receiving an "Access denied" error. They are able to clear task instances 
> from /taskinstance, but not from /clear.
> I believe this is related to the change made in AIRFLOW-4240, which had the 
> unintended side effect of breaking the has_dag_access decorator for POST 
> requests.
> This may affect other endpoints.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to