Vamsi-klu opened a new pull request, #62654:
URL: https://github.com/apache/airflow/pull/62654
## Summary
- Add `requires_access_dag("GET", DagAccessEntity.TASK)` dependency to both
`get_tasks()` and `get_task()` endpoints in `tasks.py`
- Previously, any authenticated user could list/view tasks for any DAG
without DAG-specific permission checks
- Follows the existing pattern used in `event_logs.py` and `extra_links.py`
## Test plan
- [ ] Verify unauthenticated requests to `/dags/{dag_id}/tasks` return 401
- [ ] Verify requests without DAG access return 403
- [ ] Verify authorized requests still work correctly
- [ ] Run `pytest tests/api_fastapi/core_api/routes/public/test_tasks.py -v`
Closes: #62532
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
