potiuk commented on pull request #18761: URL: https://github.com/apache/airflow/pull/18761#issuecomment-935708550
I think we need to decide first what we want to do. There is a new discussion https://github.com/apache/airflow/pull/18670 related to that (API doing the same thing) and my conclusion now is that blanket adding users might be a security issue. I ama leaning towards (only allow to add user if there is a corresponding LDAP user (it is not checked currently) in case LDAP auth is used. But before we merge that one we need to get to consensus how to do. I think it will be good if you @pawsok and @uranusjr add your opinions to discussion there -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
