mjkonarski-b commented on issue #23588: URL: https://github.com/apache/airflow/issues/23588#issuecomment-1607811224
I believe I found the root cause of the problem. A new feature was introduced in 2.3.0 - "details drawer" in Grid View (https://github.com/apache/airflow/pull/22123). Under the hood in calls `/confirm` endpoint [here](https://github.com/apache/airflow/pull/22123/files#diff-b77ad76ebab03d48f0dab32af0c48b8cb23b3f4ba9b38222e423780e1f162859R33.). The problem is that this endpoint [requires](https://github.com/apache/airflow/blob/62a534dbc7fa8ddb4c249ade85c558b64d1630dd/airflow/www/views.py#L2586) `CAN_EDIT RESOURCE_DAG` and `CAN_EDIT RESOURCE_TASK_INSTANCE` permissions, which are obviously not granted to the Viewer role by default. As a result the `/confirm` XHR call is redirected to the login page and returns its HTML content, which breaks the logic behind the "details drawer" and we get a blank page. On top of that https://github.com/apache/airflow/pull/30373 introduced more improvements to the "details drawer" and now there's also a POST being sent to `/clear` which requires even more permissions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
