[ 
https://issues.apache.org/jira/browse/AIRFLOW-6077?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Axel Goblet updated AIRFLOW-6077:
---------------------------------
    Description: 
Airflow offers password protection when setting config 
AIRFLOW__WEBSERVER__RBAC=True.

When hosting multiple instances on the same machine / address, on different 
ports (using AIRFLOW___WEBSERVER___WEB_SERVER_PORT config), logging in to one 
system grants you access to the other system as well, even if passwords differ.

  was:
Airflow offers password protection when setting config 
AIRFLOW__WEBSERVER_RBAC=True.

When hosting multiple instances on the same machine / address, on different 
ports (using AIRFLOW___WEBSERVER___WEB_SERVER_PORT config), logging in to one 
system grants you access to the other system as well, even if passwords differ.


> airflow RBAC security not working when hosting multiple instances on same 
> address
> ---------------------------------------------------------------------------------
>
>                 Key: AIRFLOW-6077
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-6077
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 1.10.4
>            Reporter: Axel Goblet
>            Priority: Major
>
> Airflow offers password protection when setting config 
> AIRFLOW__WEBSERVER__RBAC=True.
> When hosting multiple instances on the same machine / address, on different 
> ports (using AIRFLOW___WEBSERVER___WEB_SERVER_PORT config), logging in to one 
> system grants you access to the other system as well, even if passwords 
> differ.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to