pierrejeambrun opened a new pull request, #73274: URL: https://github.com/apache/airflow/pull/73274
Reparsing a file that failed to import before defining any Dag has no per-Dag key to authorize against. Viewing such a file's import error is already gated on the dedicated `IMPORT_ERRORS_ALL` view; reparsing it is a distinct action, and gating a write on a view permission would let anyone who can see the error also trigger the reparse. This adds a dedicated `AccessView.REPARSE_ALL` -- admin-granted by default, and scoped per team via the file's bundle where the auth manager supports multi-team isolation -- mirroring `IMPORT_ERRORS_ALL` (#69790). - New `AccessView.REPARSE_ALL`. - The Simple auth manager gates it admin-only; the FAB manager grants it to `Admin` by default (`All Reparses` resource). Keycloak and Amazon authorize views generically, so they need no change. - Not yet consumed by any endpoint: it is the prerequisite for #72896, which gates reparse of files with no registered Dag on it. related: #69790 --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Opus 4.8) Generated-by: Claude Code (Opus 4.8) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
