[
https://issues.apache.org/jira/browse/AIRFLOW-4450?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16832359#comment-16832359
]
ASF subversion and git services commented on AIRFLOW-4450:
----------------------------------------------------------
Commit 22c559dce7974c217bd687d4e468296b980a8e21 in airflow's branch
refs/heads/v1-10-stable from Chris McLennon
[ https://gitbox.apache.org/repos/asf?p=airflow.git;h=22c559d ]
[AIRFLOW-4450] Fix request arguments in has_dag_access (#5220)
has_dag_access needs to use request arguments from both
request.args and request.form.
This is related to the changes made in AIRFLOW-4240/#5039.
(cherry picked from commit 52b121797b328383cd39905ef762fc79e2e6a653)
> has_dag_access does not handle form parameters
> ----------------------------------------------
>
> Key: AIRFLOW-4450
> URL: https://issues.apache.org/jira/browse/AIRFLOW-4450
> Project: Apache Airflow
> Issue Type: Bug
> Components: webserver
> Affects Versions: 1.10.3
> Reporter: Chris McLennon
> Assignee: Chris McLennon
> Priority: Major
> Fix For: 1.10.4
>
>
> With the update to Airflow 1.10.3, we noticed that users that have permission
> to clear task instances are no longer able to do so from the webserver, and
> are receiving an "Access denied" error. They are able to clear task instances
> from /taskinstance, but not from /clear.
> I believe this is related to the change made in AIRFLOW-4240, which had the
> unintended side effect of breaking the has_dag_access decorator for POST
> requests.
> This may affect other endpoints.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
