Shubham and Vincent,

Let me start by saying that I apologize for my delayed response to your
original email.

I appreciate the detailed write-up and the thought behind it. I completely
agree with your use case and understand how this is applicable to
enterprises with multiple data teams using Airflow.

However, I don't agree that this level of user management belongs in "Core
Airflow".

I strongly believe that the core Airflow mission is for the community at
large and for data practitioners either individuals or teams within
enterprises. And therefore, I don't disagree with the intent of making it
easier for enterprise teams to adopt Airflow. But, I think there is a never
ending list of user management features which are needed to support
Enterprise needs. We have already struggled with this over time and faced
challenges with the Fab security manager and its integration in Airflow.

I think we should use this opportunity and your use case to "separate the
user management" from Core Airflow outside of the absolute basics. I think
this is a time to consider the concept of a "user management provider" with
a simple built-in implementation being the current Airflow functionality,
enabling alternate more complex (but separate) implementations such as your
proposal here as alternate user management providers. Maybe, this also
enables us to get rid of the Fab security manager from core Airflow?

Best regards,
Vikram


On Fri, Feb 3, 2023 at 8:22 AM Beck, Vincent <vincb...@amazon.com.invalid>
wrote:

> Thanks __
>
> On 2023-02-03, 10:55 AM, "Jarek Potiuk" <ja...@potiuk.com> wrote:
>
>     CAUTION: This email originated from outside of the organization. Do
> not click links or open attachments unless you can confirm the sender and
> know the content is safe.
>
>
>
>     Added.
>
>     On Fri, Feb 3, 2023 at 3:53 PM Beck, Vincent
>     <vincb...@amazon.com.invalid> wrote:
>     >
>     > Thank you! https://cwiki.apache.org/confluence/display/~vin100.beck
>     >
>     > On 2023-02-02, 5:38 PM, "Jarek Potiuk" <ja...@potiuk.com> wrote:
>     >
>     >     CAUTION: This email originated from outside of the organization.
> Do not click links or open attachments unless you can confirm the sender
> and know the content is safe.
>     >
>     >
>     >
>     >     What's your cwiki ID, Vincent (I'll add you without going into
> details yet)
>     >
>
>

Reply via email to