This is an automated email from the ASF dual-hosted git repository. jedcunningham pushed a commit to branch v2-2-test in repository https://gitbox.apache.org/repos/asf/airflow.git
commit f3dd5b50513fde34c3dc547a9b68a6ac36f1b8d6 Author: Jorrick Sleijster <[email protected]> AuthorDate: Thu Oct 14 12:53:02 2021 +0200 Changes related to PR #16634 (#18644) (cherry picked from commit eb2c7af5a2b934afd14443df1490f9036fee050d) --- docs/apache-airflow/security/access-control.rst | 36 ++++++++++++------------- 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/docs/apache-airflow/security/access-control.rst b/docs/apache-airflow/security/access-control.rst index 9e30956..cdeb52a 100644 --- a/docs/apache-airflow/security/access-control.rst +++ b/docs/apache-airflow/security/access-control.rst @@ -144,15 +144,15 @@ Endpoint /dags GET DAGs.can_read Viewer /dags/{dag_id} GET DAGs.can_read Viewer /dags/{dag_id} PATCH DAGs.can_edit User -/dags/{dag_id}/clearTaskInstances POST DAGs.can_read, DAG Runs.can_read, Task Instances.can_edit User +/dags/{dag_id}/clearTaskInstances POST DAGs.can_edit, DAG Runs.can_read, Task Instances.can_edit User /dags/{dag_id}/details GET DAGs.can_read Viewer /dags/{dag_id}/tasks GET DAGs.can_read, Task Instances.can_read Viewer /dags/{dag_id}/tasks/{task_id} GET DAGs.can_read, Task Instances.can_read Viewer /dags/{dag_id}/dagRuns GET DAGs.can_read, DAG Runs.can_read Viewer /dags/{dag_id}/dagRuns POST DAGs.can_edit, DAG Runs.can_create User -/dags/{dag_id}/dagRuns/{dag_run_id} DELETE DAGs.can_read, DAG Runs.can_delete User +/dags/{dag_id}/dagRuns/{dag_run_id} DELETE DAGs.can_edit, DAG Runs.can_delete User /dags/{dag_id}/dagRuns/{dag_run_id} GET DAGs.can_read, DAG Runs.can_read Viewer -/dags/~/dagRuns/list POST DAGs.can_read, DAG Runs.can_read Viewer +/dags/~/dagRuns/list POST DAGs.can_edit, DAG Runs.can_read User /eventLogs GET Audit Logs.can_read Viewer /eventLogs/{event_log_id} GET Audit Logs.can_read Viewer /importErrors GET ImportError.can_read Viewer @@ -169,7 +169,7 @@ Endpoint /dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances/{task_id} GET DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer /dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances/{task_id}/links GET DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer /dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances/{task_id}/logs/{task_try_number} GET DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer -/dags/~/dagRuns/~/taskInstances/list POST DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer +/dags/~/dagRuns/~/taskInstances/list POST DAGs.can_edit, DAG Runs.can_read, Task Instances.can_read User /variables GET Variables.can_read Op /variables POST Variables.can_create Op /variables/{variable_key} DELETE Variables.can_delete Op @@ -190,27 +190,27 @@ Website Permissions Action Permissions Minimum Role ====================================== ======================================================================= ============ Access homepage Website.can_read Viewer -Get DAG stats Dags.can_read, DAG Runs.can_read Viewer -Get Task stats Dags.can_read, DAG Runs.can_read, Task Instances.can_read Viewer -Get last DAG runs Dags.can_read, DAG Runs.can_read Viewer -Get DAG code Dags.can_read, DAG Code.can_read Viewer -Get DAG details Dags.can_read, DAG Runs.can_read Viewer +Get DAG stats DAGs.can_read, DAG Runs.can_read Viewer +Get Task stats DAGs.can_read, DAG Runs.can_read, Task Instances.can_read Viewer +Get last DAG runs DAGs.can_read, DAG Runs.can_read Viewer +Get DAG code DAGs.can_read, DAG Code.can_read Viewer +Get DAG details DAGs.can_read, DAG Runs.can_read Viewer Get rendered DAG DAGs.can_read, Task Instances.can_read Viewer Get Logs with metadata DAGs.can_read, Task Instances.can_read, Task Logs.can_read Viewer Get Log DAGs.can_read, Task Instances.can_read, Task Logs.can_read Viewer Redirect to external Log DAGs.can_read, Task Instances.can_read, Task Logs.can_read Viewer Get Task DAGs.can_read, Task Instances.can_read Viewer Get XCom DAGs.can_read, Task Instances.can_read, XComs.can_read Viewer -Triggers Task Instance DAGs.can_read, Task Instances.can_create User +Triggers Task Instance DAGs.can_edit, Task Instances.can_create User Delete DAG DAGs.can_delete User -Trigger DAG run Dags.can_edit, DAG Runs.can_create User -Clear DAG DAGs.can_read, Task Instances.can_delete User -Clear DAG Run DAGs.can_read, Task Instances.can_delete User -Mark DAG as blocked Dags.can_read, DAG Runs.can_read User -Mark DAG Run as failed Dags.can_read, DAG Runs.can_edit User -Mark DAG Run as success Dags.can_read, DAG Runs.can_edit User -Mark Task as failed DAGs.can_read, Task Instances.can_edit User -Mark Task as success DAGs.can_read, Task Instances.can_edit User +Trigger DAG run DAGs.can_edit, DAG Runs.can_create User +Clear DAG DAGs.can_edit, Task Instances.can_delete User +Clear DAG Run DAGs.can_edit, Task Instances.can_delete User +Mark DAG as blocked DAGS.can_edit, DAG Runs.can_read User +Mark DAG Run as failed DAGS.can_edit, DAG Runs.can_edit User +Mark DAG Run as success DAGS.can_edit, DAG Runs.can_edit User +Mark Task as failed DAGs.can_edit, Task Instances.can_edit User +Mark Task as success DAGs.can_edit, Task Instances.can_edit User Get DAG as tree DAGs.can_read, Task Instances.can_read, Viewer Task Logs.can_read Get DAG as graph DAGs.can_read, Task Instances.can_read, Viewer
