uranusjr commented on PR #47241: URL: https://github.com/apache/airflow/pull/47241#issuecomment-2709505789
> "Get alias" and "Get aliases" just show Id, name and group. No details regarding an asset. So, I think there's no need to check if the user has access to the asset referred by these aliases. I agree with _Get Alias(es)_ do not need to check asset perm. However, we probably should check alias perms in _Get Asset(s)_ since it shows a list of aliases an asset is associated to. The list should only contain aliases the user has access to. (This brings up the question if the alias responses should also include a list of associated assets, but that’s a question for another day, and perm check should be added to it if that’s implemented.) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
