sjyangkevin commented on PR #54308:
URL: https://github.com/apache/airflow/pull/54308#issuecomment-3190594950

   All the issues should be resolved. I've performed the following manual 
functional testing
   
   1. Use SimpleAuthManager, the `respondents` should be set to `username` 
since the `get_id()` method for this auth manager returns username
   2. Use FabAuthManager, the `respondents` should be set to `user_id`, the 
`id` in `ab_user` and the type should be string, since the `get_id()` method 
for this auth manager returns the `id` in `ab_user`.
   
   When using SimpleAuthManager, only the user set in the `respondents` can 
action on the corresponding task, otherwise, a `403` error is raised. logging 
information at the moment is only available in API server logging.
   
   When using FabAuthManager, even though a user is assigned `edit` permission 
on `HITL_DETAIL` and the DAG, the user is not able to action on a task if who 
is not the one of the `respondents` to that task. A `403` error is raised. When 
the `respondents` is set, only users who are a respondent and with `edit` 
permission on `HITL_DETAIL` and the DAG can action on the task.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to