Skip to content

fix(keycloak): add missing Dag resource to Op-team permission - #71320

Closed
waterWang wants to merge 1 commit into
apache:mainfrom
waterWang:fix/keycloak-op-team-dag-resource
Closed

fix(keycloak): add missing Dag resource to Op-team permission#71320
waterWang wants to merge 1 commit into
apache:mainfrom
waterWang:fix/keycloak-op-team-dag-resource

Conversation

@waterWang

Copy link
Copy Markdown

fix(keycloak): add missing Dag resource to Op-team permission

The Op-{team} permission created by the create-team command was missing
the Dag:{team} resource. This caused users with the Op role to not
receive the expected permission for the team's DAG resource.

The fix adds Dag:{team} to the Op-{team} permission resources in two
places:

  1. _get_permissions_to_create() — the initial permission creation
  2. _attach_team_permissions() — the policy attachment for create-team

Fixes #71319

The Op-{team} permission created by the create-team command was missing
the Dag:{team} resource. This caused users with the Op role to not
receive the expected permission for the team's DAG resource.

The fix adds Dag:{team} to the Op-{team} permission resources in two
places:
1. _get_permissions_to_create() — the initial permission creation
2. _attach_team_permissions() — the policy attachment for create-team

Fixes apache#71319
@vincbeck

Copy link
Copy Markdown
Contributor

Static checks are failing

@kaxil

kaxil commented Aug 11, 2026

Copy link
Copy Markdown
Member

Closing this as part of a cleanup of a large batch of PRs opened in quick succession from this account.

18 PRs have been opened here in the past two weeks and none have merged. Several show signs of being generated and submitted without review: #71432 and #71433 are the same change across the same five files, opened two minutes apart, and several titles carry a leaked agent identifier that other contributors already flagged as garbled text on #70629 and #71322.

Airflow is maintained by volunteers. Every PR costs reviewer time and CI capacity, so a high volume of unvetted submissions has a real cost to the project.

You are welcome to keep contributing. Please open one change at a time, run it locally against the tests, and read the contributors' guide before submitting. If you think a specific change here is correct, comment with the reasoning and a maintainer can reopen it.

@kaxil kaxil closed this Aug 11, 2026
@kaxil kaxil added the AI Spam label Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Keycloak team Op permission is missing team DAG resource

3 participants