martynas-matimaitis-cko opened a new issue #20171:
URL: https://github.com/apache/airflow/issues/20171


   ### Apache Airflow version
   
   2.2.2 (latest released)
   
   ### What happened
   
   I have created a new custom role, assigned necessary rules, but once I 
assigned that role to myself I was unable to pause/unpause or run any of my 
DAGs - all of the options are disabled/greyed out.
   
   To expand on "necessary rules":
   
   At first I assigned only the minimum required permissions which I got from 
the documentation 
[here](https://airflow.apache.org/docs/apache-airflow/stable/security/access-control.html)
 - which are `DAGs.can_edit, DAG Runs.can_create` - that didn't work. After 
that I literally copied all of the permissions from the User role and pasted to 
my new role - that didn't help as well. 
   
   After that I created another role with a new name, repeated all of the steps 
above and exactly the same issue happened.
   
   Weirdest thing is that if I assign myself the User role I am able to 
run/pause/unpause DAGs even though my new role has even more permissions than 
the User role.
   
   Permissions in the User role: default
   
   Permissions in my new role:
   
   `TCRole | [can read on Website, can edit on DAG:ttl_daily, can read on 
DAG:ttl_daily, can create on DAG Runs, can edit on DAG Runs, can delete on DAG 
Runs, can create on Task Instances, can edit on Task Instances, can delete on 
Task Instances, can edit on My Password, can read on My Password, can edit on 
My Profile, can read on My Profile, can read on DAGs, can read on DAG Runs, 
menu access on DAG Runs, menu access on Browse, can read on Jobs, menu access 
on Jobs, can read on Audit Logs, menu access on Audit Logs, can read on Task 
Instances, menu access on Task Instances, can read on SLA Misses, menu access 
on SLA Misses, can read on Plugins, menu access on Plugins, can read on XComs, 
menu access on DAG Dependencies, menu access on Documentation, menu access on 
Docs, can read on ImportError, can read on DAG Code, can read on DAG 
Dependencies, can read on Task Logs, can edit on DAGs, can delete on DAGs]`
   
   
   
   ### What you expected to happen
   
   I would expect that if a user assigns same permissions to different roles 
(newly created or default) this would have the same outcome / would work the 
same way.
   
   ### How to reproduce
   
   _No response_
   
   ### Operating System
   
   AWS Fargate / Amazon Linux 1
   
   ### Versions of Apache Airflow Providers
   
   We are using the official Apache Airflow docker image - 
https://hub.docker.com/r/apache/airflow
   
   ### Deployment
   
   Docker-Compose
   
   ### Deployment details
   
   _No response_
   
   ### Anything else
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [ ] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of 
Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to