haseebmalik18 opened a new pull request, #65393:
URL: https://github.com/apache/airflow/pull/65393
AwsAuthManager currently ignores `team_name` entirely and
`is_authorized_team` raises `NotImplementedError`, which blocks multi-team for
AWS deployments.
Following the KeycloakAuthManager as reference, this PR:
- Extracts `team_name` from resource details in `is_authorized_*` methods
- Implements `is_authorized_team` with a new `TEAM` AVP entity
- Passes `team_name` through `filter_authorized_*` methods to the AVP
facade
- Enhances AVP context with `team_name` for Cedar policy evaluation
- Updates the Cedar schema with `Team` entity type and `team_name` context
on team-scoped actions
closes: #65371
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
