potiuk commented on issue #31544:
URL: https://github.com/apache/airflow/issues/31544#issuecomment-1663390138

   Nope. The "run task" has been removed  from the UI, also because it was a 
potential security issue, we will not get into details of that but a CVE 
announcement about it will be done soon (watch users@ and ASF announcements)
   
   So the update here is - for now you can use clear task. Running single task 
from the UI is not likely to come back in its past form. I will turn it into 
feature request and I will encourage any one who wants somethign similar to 
explain their use case and why they cannot use any of the alternatives, 
including CLI commands (primary CLI commands were foreseen for such things like 
testing and running individual tasks). 
   
   Running single task on the UI and using webserver is not compliant with 
Airfow security model 
https://airflow.apache.org/docs/apache-airflow/stable/security/index.html, 
where users of the UI should not get the capabilities of running arbitrary code 
coming from the DAGs on the webserver.  
   
   AIrflow CLI on the other hand, with access to the Airflow servers is the 
place where running arbitrary code is expected and you have authorisation to do 
so. If it is just a "convenience" and "bypassing" of the security perimeter we 
set then it's not likely to come back as user feature and you shoudl switch to 
CLI and runnign any kind of tests and tasks there if you need. If there is a 
legitmate feature, the please explain in detail the use case you have and why 
CLI access is not enough @JonnyWaffles @harinipriya-nv.
   
   Hopefully if you do it in a clear an concise way and explain the use case, 
somebody will implement it. But this is like with all things in open source. If 
there is no-one doing it, it won't get implemented. Explaining the feature you 
want and reasoning why it is needed is the next best thing after proposing a PR 
doing it that you can do to increase the likelihood someone will pick an 
interest and implement it
   
   Converting it into a feature request and waiting for the detailed 
explanation.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to