github-actions[bot] opened a new pull request, #75107: URL: https://github.com/apache/airflow/pull/75107
* Scope asset Dag and task references to readable Dags The asset list and detail endpoints (public and UI) returned every scheduled Dag, producing task and consuming task reference of an asset, including ones that belong to Dags the requesting user cannot read. Those nested references are now narrowed to the user's readable Dags. Generated-by: Claude Opus 5 following the guidelines at https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions * Rename newsfragment to the PR number Generated-by: Claude Opus 5 following the guidelines at https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions * Require readable_dag_ids when building an asset response With a None default, a caller that forgot the argument got every Dag and task reference back unfiltered. Without a default, each caller has to say whether the references are narrowed, so a new endpoint fails closed instead of leaking references to Dags the user cannot read. (cherry picked from commit 99f2b8618df8727c9e58a5524b0eb9a7ed8f518b) Co-authored-by: Jarek Potiuk <[email protected]> Generated-by: Claude Opus 5 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
