fix(keycloak): add missing Dag resource to Op-team permission - #71320
fix(keycloak): add missing Dag resource to Op-team permission#71320waterWang wants to merge 1 commit into
Conversation
The Op-{team} permission created by the create-team command was missing
the Dag:{team} resource. This caused users with the Op role to not
receive the expected permission for the team's DAG resource.
The fix adds Dag:{team} to the Op-{team} permission resources in two
places:
1. _get_permissions_to_create() — the initial permission creation
2. _attach_team_permissions() — the policy attachment for create-team
Fixes apache#71319
|
Static checks are failing |
|
Closing this as part of a cleanup of a large batch of PRs opened in quick succession from this account. 18 PRs have been opened here in the past two weeks and none have merged. Several show signs of being generated and submitted without review: #71432 and #71433 are the same change across the same five files, opened two minutes apart, and several titles carry a leaked agent identifier that other contributors already flagged as garbled text on #70629 and #71322. Airflow is maintained by volunteers. Every PR costs reviewer time and CI capacity, so a high volume of unvetted submissions has a real cost to the project. You are welcome to keep contributing. Please open one change at a time, run it locally against the tests, and read the contributors' guide before submitting. If you think a specific change here is correct, comment with the reasoning and a maintainer can reopen it. |
fix(keycloak): add missing Dag resource to Op-team permission
The Op-{team} permission created by the create-team command was missing
the Dag:{team} resource. This caused users with the Op role to not
receive the expected permission for the team's DAG resource.
The fix adds Dag:{team} to the Op-{team} permission resources in two
places:
Fixes #71319