[
https://issues.apache.org/jira/browse/AIRFLOW-45?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15286974#comment-15286974
]
Chris Riccomini commented on AIRFLOW-45:
----------------------------------------
{quote}
Could we not handle this with a regexp of fields that should be hidden rather
than a boolean?
{quote}
Yea, I suppose a regex rather than a boolean would be a bit more flexible. On
the other hand, as a user, if I add a variable that I want to be hidden, I'd
have to go change the config whenever I do this, which is kind of annoying. I
can see arguments both ways.
For the purpose of this JIRA, though, I feel that we should keep things simple,
and just have a boolean. If we want to add a regex, let's open a follow-on JIRA.
> Support hidden Airflow variables
> --------------------------------
>
> Key: AIRFLOW-45
> URL: https://issues.apache.org/jira/browse/AIRFLOW-45
> Project: Apache Airflow
> Issue Type: Improvement
> Components: security
> Reporter: Chris Riccomini
> Assignee: Matthew Chen
>
> We have a use case where someone wants to set a variable for their DAG, but
> they don't want it visible via the UI. I see that variables are encrypted in
> the DB (if the crypto package is installed), but the variables are still
> visible via the UI, which is a little annoying.
> Obviously, this is not 100% secure, since you can still create a DAG to read
> the variable, but it will at least keep arbitrary users from logging
> in/loading the UI and seeing the variable.
> I propose basically handling this the same way that DB hook passwords are
> handled. Don't show them in the UI when the edit button is clicked, but allow
> the variables to be editable.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
