Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document changes related to PR #16634 #18644

Merged
merged 1 commit into from
Oct 14, 2021
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 18 additions & 18 deletions docs/apache-airflow/security/access-control.rst
Original file line number Diff line number Diff line change
Expand Up @@ -148,15 +148,15 @@ Endpoint
/dags GET DAGs.can_read Viewer
/dags/{dag_id} GET DAGs.can_read Viewer
/dags/{dag_id} PATCH DAGs.can_edit User
/dags/{dag_id}/clearTaskInstances POST DAGs.can_read, DAG Runs.can_read, Task Instances.can_edit User
/dags/{dag_id}/clearTaskInstances POST DAGs.can_edit, DAG Runs.can_read, Task Instances.can_edit User
/dags/{dag_id}/details GET DAGs.can_read Viewer
/dags/{dag_id}/tasks GET DAGs.can_read, Task Instances.can_read Viewer
/dags/{dag_id}/tasks/{task_id} GET DAGs.can_read, Task Instances.can_read Viewer
/dags/{dag_id}/dagRuns GET DAGs.can_read, DAG Runs.can_read Viewer
/dags/{dag_id}/dagRuns POST DAGs.can_edit, DAG Runs.can_create User
/dags/{dag_id}/dagRuns/{dag_run_id} DELETE DAGs.can_read, DAG Runs.can_delete User
/dags/{dag_id}/dagRuns/{dag_run_id} DELETE DAGs.can_edit, DAG Runs.can_delete User
/dags/{dag_id}/dagRuns/{dag_run_id} GET DAGs.can_read, DAG Runs.can_read Viewer
/dags/~/dagRuns/list POST DAGs.can_read, DAG Runs.can_read Viewer
/dags/~/dagRuns/list POST DAGs.can_edit, DAG Runs.can_read User
/eventLogs GET Audit Logs.can_read Viewer
/eventLogs/{event_log_id} GET Audit Logs.can_read Viewer
/importErrors GET ImportError.can_read Viewer
Expand All @@ -173,7 +173,7 @@ Endpoint
/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances/{task_id} GET DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer
/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances/{task_id}/links GET DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer
/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances/{task_id}/logs/{task_try_number} GET DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer
/dags/~/dagRuns/~/taskInstances/list POST DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer
/dags/~/dagRuns/~/taskInstances/list POST DAGs.can_edit, DAG Runs.can_read, Task Instances.can_read User
/variables GET Variables.can_read Op
/variables POST Variables.can_create Op
/variables/{variable_key} DELETE Variables.can_delete Op
Expand All @@ -194,27 +194,27 @@ Website Permissions
Action Permissions Minimum Role
====================================== ======================================================================= ============
Access homepage Website.can_read Viewer
Get DAG stats Dags.can_read, DAG Runs.can_read Viewer
Get Task stats Dags.can_read, DAG Runs.can_read, Task Instances.can_read Viewer
Get last DAG runs Dags.can_read, DAG Runs.can_read Viewer
Get DAG code Dags.can_read, DAG Code.can_read Viewer
Get DAG details Dags.can_read, DAG Runs.can_read Viewer
Get DAG stats DAGs.can_read, DAG Runs.can_read Viewer
Get Task stats DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer
Get last DAG runs DAGs.can_read, DAG Runs.can_read Viewer
Get DAG code DAGs.can_read, DAG Code.can_read Viewer
Get DAG details DAGs.can_read, DAG Runs.can_read Viewer
Get rendered DAG DAGs.can_read, Task Instances.can_read Viewer
Get Logs with metadata DAGs.can_read, Task Instances.can_read, Task Logs.can_read Viewer
Get Log DAGs.can_read, Task Instances.can_read, Task Logs.can_read Viewer
Redirect to external Log DAGs.can_read, Task Instances.can_read, Task Logs.can_read Viewer
Get Task DAGs.can_read, Task Instances.can_read Viewer
Get XCom DAGs.can_read, Task Instances.can_read, XComs.can_read Viewer
Triggers Task Instance DAGs.can_read, Task Instances.can_create User
Triggers Task Instance DAGs.can_edit, Task Instances.can_create User
Delete DAG DAGs.can_delete User
Trigger DAG run Dags.can_edit, DAG Runs.can_create User
Clear DAG DAGs.can_read, Task Instances.can_delete User
Clear DAG Run DAGs.can_read, Task Instances.can_delete User
Mark DAG as blocked Dags.can_read, DAG Runs.can_read User
Mark DAG Run as failed Dags.can_read, DAG Runs.can_edit User
Mark DAG Run as success Dags.can_read, DAG Runs.can_edit User
Mark Task as failed DAGs.can_read, Task Instances.can_edit User
Mark Task as success DAGs.can_read, Task Instances.can_edit User
Trigger DAG run DAGs.can_edit, DAG Runs.can_create User
Clear DAG DAGs.can_edit, Task Instances.can_delete User
Clear DAG Run DAGs.can_edit, Task Instances.can_delete User
Mark DAG as blocked DAGS.can_edit, DAG Runs.can_read User
Mark DAG Run as failed DAGS.can_edit, DAG Runs.can_edit User
Mark DAG Run as success DAGS.can_edit, DAG Runs.can_edit User
Mark Task as failed DAGs.can_edit, Task Instances.can_edit User
Mark Task as success DAGs.can_edit, Task Instances.can_edit User
Get DAG as tree DAGs.can_read, Task Instances.can_read, Viewer
Task Logs.can_read
Get DAG as graph DAGs.can_read, Task Instances.can_read, Viewer
Expand Down