github-actions[bot] opened a new pull request, #75108:
URL: https://github.com/apache/airflow/pull/75108
GET /dags/{dag_id}/dagRuns/{dag_run_id}/upstreamAssetEvents returned every
asset event a run consumed as long as the caller could read the consuming
Dag.
Events of assets, or produced by source Dags, the caller is not allowed to
read
were exposed, including their name, uri, extra and source Dag/task ids, even
though GET /assets/events hides the same events.
Query the consumed events through the dagrun_asset_event table and apply the
same per-asset and per-source-Dag readability filters as GET /assets/events,
so hidden events are excluded from both the response and total_entries.
(cherry picked from commit 6f408e1715b411525e2c8395b4a3c39121c5d97d)
Co-authored-by: Henry Chen <[email protected]>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
