Vamsi-klu commented on PR #70661:
URL: https://github.com/apache/airflow/pull/70661#issuecomment-5115349121

   I’ve resumed this PR and completed the work that was pending when it was 
closed.
   
   - Rebased the branch onto current `main`.
   - Verified that the task-group route loads `/ui/structure/structure_data`.
   - Browser-tested the actual task-group page with a FAB user that has read 
access only to `DAG:example_task_group`, without global Dag or Dag-run read 
access. The permitted structure request returned `200`, while another Dag 
returned `403`.
   - Ran the full structure endpoint test file in Breeze: `31 passed`.
   - Ran the regular and manual prek stages successfully.
   - Confirmed GitHub CI is green.
   
   The underlying mismatch was that `DagAccessEntity.TASK_INSTANCE` requires 
both “Task Instances” and “DAG Runs” in FAB, even though this endpoint returns 
serialized topology rather than runtime task-instance data. The updated 
authorization now matches the data returned by the endpoint.
   
   The PR is ready for review again. Could you take another look when you have 
time?
   
   ---
   Drafted-by: Codex (GPT-5); reviewed by @Vamsi-klu before posting
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to