[
https://issues.apache.org/jira/browse/AIRFLOW-5577?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17090069#comment-17090069
]
Alex Ang Hock Hee commented on AIRFLOW-5577:
--------------------------------------------
I know this issue has been closed but would like to highlight that
filter_by_owner as stated in the documentation
([https://airflow.apache.org/docs/1.10.9/security.html]) is for the purpose of
multi-tenancy.
IMHO, there are many scenario in a multi-tenancy environment where users should
not see each others' dag by default. While there should be provision for users
to grant permission to others, the norm should be that users can only view/edit
their own dags. The current method to specify permission to role requires one
role for each user which is impossible for the admin to maintain and especially
so for ldap integration where all users by default share the same role.
One possible approach is to have something similar to all_dags, such as
own_dags (permission is granted to owner) and group_dags (permission is granted
to [ldap] group) which checks for dag owner and their group.
> Dags Filter_by_owner is missing in RBAC
> ---------------------------------------
>
> Key: AIRFLOW-5577
> URL: https://issues.apache.org/jira/browse/AIRFLOW-5577
> Project: Apache Airflow
> Issue Type: Bug
> Components: contrib
> Affects Versions: 1.10.3, 1.10.4, 1.10.5
> Reporter: Hari
> Assignee: Hari
> Priority: Major
> Labels: easyfix
>
> After enabling the RBAC, the dags filter by owner option is missing. All the
> Dags will be visible to all the users.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
