airflow-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Chris Riccomini (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AIRFLOW-40) Extending LDAP multitenancy to filter DAGs over LDAP groups
Date Tue, 03 May 2016 15:22:13 GMT

    [ https://issues.apache.org/jira/browse/AIRFLOW-40?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15268872#comment-15268872
] 

Chris Riccomini commented on AIRFLOW-40:
----------------------------------------

+1 In general, security needs to be completely re-done (or, done in the first place), in Airflow.

> Extending LDAP multitenancy to filter DAGs over LDAP groups
> -----------------------------------------------------------
>
>                 Key: AIRFLOW-40
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-40
>             Project: Apache Airflow
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: Airflow 2.0
>            Reporter: Damien Lejeune
>            Priority: Minor
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> Currently multitenancy works with Airflow by filtering the DAGs over the specified owner.
In the context of a LDAP authentication, the filtering is done over the user name. It would
be interesting to filter DAGs over LDAP groups a user belongs to instead. This would allow
teams to develop and monitor their pipelines without having to share common credentials. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message