potiuk commented on PR #58292: URL: https://github.com/apache/airflow/pull/58292#issuecomment-3570312748
I think this one is a more general "API design" proposal - I find it useful to have this one also it could be potentially used to address things like https://github.com/apache/airflow/issues/58618 (but of course we do not need API for that). One doubt I have is "roles" - we do NOT have a concept of roles build in Airflow, we have permissions. Roles are specific for FAB provider Auth manager, and there is a different definition of Roles in KeyCloak Auth Manger - completely outside of Airflow "core" and outside of "Auth Manager". So I am not sure even if we can return anything there, because I believe we do not have anything to even enumerate permissions the user has - at most we can simply reject particular request , but in general case there is no "role" definition nor list of permissions - this is not how Auth Manager API is defined. But I would love more @vincbeck and @pierrejeambrun and @jason810496 to take a look at and comment. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
