pierrejeambrun commented on issue #62532: URL: https://github.com/apache/airflow/issues/62532#issuecomment-5269540552
All those routes are actually disclosing TI related information. Giving fab dag specific access to a user isn't giving permissions on all entities of that dag. It's not how the security model is built. You still need TASK_INSTANCE, DAG_RUN, STRUCTURE... permissions to allow such users to access those routes. Closing as we will probably not change that. Feel free to re-open if I missed something. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
