[
https://issues.apache.org/jira/browse/AIRFLOW-5562?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tao Feng resolved AIRFLOW-5562.
-------------------------------
Fix Version/s: 1.10.7
Assignee: Liu Xuesi
Resolution: Fixed
> Skip grant single DAG permissions for Admin role
> ------------------------------------------------
>
> Key: AIRFLOW-5562
> URL: https://issues.apache.org/jira/browse/AIRFLOW-5562
> Project: Apache Airflow
> Issue Type: Improvement
> Components: security
> Affects Versions: 1.10.3, 1.10.4, 1.10.5
> Reporter: Liu Xuesi
> Assignee: Liu Xuesi
> Priority: Major
> Labels: security, security-groups
> Fix For: 1.10.7
>
> Attachments: admin_permission_full_of_dags.jpg
>
> Original Estimate: 168h
> Remaining Estimate: 168h
>
> From AIRFLOW-2267，there is a function named *update_admin_perm_view* will
> refresh admin permission then add ALL permission to Admin role.
> But, DAG level access make each DAG a MenuView, these views will be grant to
> Admin role. As Admin role already have access to *all_dags*, these
> permissions actually make Admin role's permission more chaotic.
> In my project, it is hard to check permissions in webUI and actually this
> lead to some performance issues.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
