potiuk commented on PR #67620: URL: https://github.com/apache/airflow/pull/67620#issuecomment-4797343006
> If this returns false, we proceed with existing_conn = None and the connection testing from the body. I would expect an explicit 403 saying, you don't have read access permission on this existing connection to be able to test it. Ahh Right .. updated the description - I indeed changed the solution - to silently ignore it - based on security principle of not revealing anything - but forgot to update the description. If we had 403 - that on it's own would allow to enumerate the connections, that that caller should not even be aware of existence - so "silent" return (missing) is better than 403. Updated the description to explain it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
