This is an automated email from the ASF dual-hosted git repository. pankaj pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new fd86fae5d5 Document the missing website permission (#36329)
fd86fae5d5 is described below
commit fd86fae5d5f27127eb93b31d9965a9b30cf32c7a
Author: Pankaj Singh <[email protected]>
AuthorDate: Fri Dec 22 13:30:18 2023 +0530
Document the missing website permission (#36329)
* Add missing website permission
* Add missing permission
* Apply review suggestions
* Fix indentation
---
.../auth-manager/access-control.rst | 44 ++++++++++++++++++++++
1 file changed, 44 insertions(+)
diff --git a/docs/apache-airflow-providers-fab/auth-manager/access-control.rst
b/docs/apache-airflow-providers-fab/auth-manager/access-control.rst
index c63894498e..98424360d2 100644
--- a/docs/apache-airflow-providers-fab/auth-manager/access-control.rst
+++ b/docs/apache-airflow-providers-fab/auth-manager/access-control.rst
@@ -151,6 +151,9 @@ Endpoint
/dags/{dag_id}/dagRuns/{dag_run_id}
DELETE DAGs.can_edit, DAG Runs.can_delete
User
/dags/{dag_id}/dagRuns/{dag_run_id}
GET DAGs.can_read, DAG Runs.can_read
Viewer
/dags/~/dagRuns/list
POST DAGs.can_edit, DAG Runs.can_read
User
+/datasets
GET Datasets.can_read
Viewer
+/datasets/{uri}
GET Datasets.can_read
Viewer
+/datasets/events
GET Datasets.can_read
Viewer
/eventLogs
GET Audit Logs.can_read
Viewer
/eventLogs/{event_log_id}
GET Audit Logs.can_read
Viewer
/importErrors
GET ImportError.can_read
Viewer
@@ -187,6 +190,7 @@ Endpoint
/roles/{role_name}
GET Roles.can_read
Admin
/roles/{role_name}
PATCH Roles.can_edit
Admin
/roles/{role_name}
DELETE Roles.can_delete
Admin
+/permissions
GET Permission Views.can_read
Admin
==================================================================================
====== =================================================================
============
@@ -196,19 +200,28 @@ Website Permissions
Action Permissions
Minimum Role
======================================
=======================================================================
============
Access homepage Website.can_read
Viewer
+Show Browse menu Browse.menu_access
Viewer
+Show DAGs menu DAGs.menu_access
Viewer
Get DAG stats DAGs.can_read, DAG Runs.can_read
Viewer
+Show Task Instances menu Task Instances.menu_access
Viewer
Get Task stats DAGs.can_read, DAG Runs.can_read, Task
Instances.can_read Viewer
Get last DAG runs DAGs.can_read, DAG Runs.can_read
Viewer
Get DAG code DAGs.can_read, DAG Code.can_read
Viewer
Get DAG details DAGs.can_read, DAG Runs.can_read
Viewer
+Show DAG Dependencies menu DAG Dependencies.menu_access
Viewer
+Get DAG Dependencies DAG Dependencies.can_read
Viewer
Get rendered DAG DAGs.can_read, Task Instances.can_read
Viewer
Get Logs with metadata DAGs.can_read, Task Instances.can_read,
Task Logs.can_read Viewer
Get Log DAGs.can_read, Task Instances.can_read,
Task Logs.can_read Viewer
Redirect to external Log DAGs.can_read, Task Instances.can_read,
Task Logs.can_read Viewer
Get Task DAGs.can_read, Task Instances.can_read
Viewer
+Show XCom menu XComs.menu_access
Op
Get XCom DAGs.can_read, Task Instances.can_read,
XComs.can_read Viewer
+Create XCom XComs.can_create
Op
+Delete XCom XComs.can_delete
Op
Triggers Task Instance DAGs.can_edit, Task
Instances.can_create User
Delete DAG DAGs.can_delete
User
+Show DAG Runs menu DAG Runs.menu_access
Viewer
Trigger DAG run DAGs.can_edit, DAG Runs.can_create
User
Clear DAG DAGs.can_edit, Task
Instances.can_delete User
Clear DAG Run DAGs.can_edit, Task
Instances.can_delete User
@@ -228,6 +241,7 @@ Toggle DAG paused status DAGs.can_edit
Show Gantt Chart DAGs.can_read, Task Instances.can_read
Viewer
Get external links DAGs.can_read, Task Instances.can_read
Viewer
Show Task Instances DAGs.can_read, Task Instances.can_read
Viewer
+Show Configurations menu Configurations.menu_access
Op
Show Configs Configurations.can_read
Viewer
Delete multiple records DAGs.can_edit
User
Set Task Instance as running DAGs.can_edit
User
@@ -235,12 +249,42 @@ Set Task Instance as failed DAGs.can_edit
Set Task Instance as success DAGs.can_edit
User
Set Task Instance as up_for_retry DAGs.can_edit
User
Autocomplete DAGs.can_read
Viewer
+Show Dataset menu Datasets.menu_access
Viewer
+Show Datasets Datasets.can_read
Viewer
+Show Docs menu Docs.menu_access
Viewer
+Show Documentation menu Documentation.menu_access
Viewer
+Show Jobs menu Jobs.menu_access
Viewer
+Show Audit Log Audit Logs.menu_access
Viewer
+Reset Password My Password.can_read, My
Password.can_edit Viewer
+Show Permissions menu Permission Views.menu_access
Admin
+List Permissions Permission Views.can_read
Admin
+Get My Profile My Profile.can_read
Viewer
+Update My Profile My Profile.can_edit
Viewer
List Logs Audit Logs.can_read
Viewer
List Jobs Jobs.can_read
Viewer
+Show SLA Misses menu SLA Misses.menu_access
Viewer
List SLA Misses SLA Misses.can_read
Viewer
List Plugins Plugins.can_read
Viewer
+Show Plugins menu Plugins.menu_access
Viewer
+Show Providers menu Providers.menu_access
Op
+List Providers Providers.can_read
Op
List Task Reschedules Task Reschedules.can_read
Admin
+Show Triggers menu Triggers.menu_access
Admin
List Triggers Triggers.can_read
Admin
+Show Admin menu Admin.menu_access
Viewer
+Show Connections menu Connections.menu_access
Op
+Show Pools menu Pools.menu_access
Viewer
+Show Variables menu Variables.menu_access
Op
+Show Roles menu Roles.menu_access
Admin
+List Roles Roles.can_read
Admin
+Create Roles Roles.can_create
Admin
+Update Roles Roles.can_edit
Admin
+Delete Roles Roles.can_delete
Admin
+Show Users menu Users.menu_access
Admin
+Create Users Users.can_create
Admin
+Update Users Users.can_edit
Admin
+Delete Users Users.can_delete
Admin
+Reset user Passwords Passwords.can_edit, Passwords.can_read
Admin
======================================
=======================================================================
============
These DAG-level controls can be set directly through the UI / CLI, or encoded
in the dags themselves through the access_control arg.
