basantjamwal commented on issue #74357: URL: https://github.com/apache/airflow/issues/74357#issuecomment-6024224929
I looked at `cli/commands.py` and think I found the cause. Without `--teams`: - `ReadOnly` is attached with `resource_names=[]`, so it covers GET/MENU/LIST on **all** resources, including admin-only menu items. With AFFIRMATIVE, Viewers get MENU access through it. - `Op` and `User` only attach their own role policy, not Admin/SuperAdmin. With UNANIMOUS, Admin gets DENY on Pool/LIST from `Op`, which blocks access. I'd like to work on a PR for this. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
