[ 
https://issues.apache.org/jira/browse/AIRFLOW-5145?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ash Berlin-Taylor resolved AIRFLOW-5145.
----------------------------------------
    Fix Version/s: 1.10.5
       Resolution: Fixed

> rbac ui presents false choice to encrypt or not encrypt variable values
> -----------------------------------------------------------------------
>
>                 Key: AIRFLOW-5145
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-5145
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: ui
>    Affects Versions: 1.10.3, 1.10.4
>            Reporter: Jon Stern
>            Priority: Minor
>             Fix For: 1.10.5
>
>
> With webserver rbac=True and core fernet_key set, variable values are always 
> encrypted, but they are only marked as is_encrypted = true in the database if 
> the user explicitly checks theĀ *Is Encrypted* checkbox on the variable create 
> screen. If a variable is set up this way, then it is not correctly displayed 
> in the UI and calls to Variable.get return the cipher text instead of the 
> decrypted value.
> Workarounds are:
>  * Explicitly check the box in the UI if you know you've got a fernet key set 
> up.
>  * Edit the variable after creation and re-enter the value. On the edit 
> screen there is no checkbox, and is_encrypted is properly set to true on 
> saving.
> Since the only right answer is is_encrypted = true, it seems like the 
> checkbox should not be displayed (as in the edit screen and as in the 
> non-rbac create screen)



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

Reply via email to