apache / apache/airflow

DAG permission setting per owner and/or per tag

Open
#19,226 7 comments 0 reactions 0 assignees View on GitHub
kind:feature multi-team - aip-67 security
Dominant language
Python
Stars
46.9k
Forks
17.8k
Avg merge
2d 10h
Merged PRs (30d)
483

Description

### Description

Access Control feature where one can limit a DAG permissions (read, write, etc.) for a group of DAGs, namely, the ones where owner is set or the tag is set to the desired value.

### Use case/motivation

Restrict access for user to DAG read/write for all new DAGs created by the another user

### Related issues

_No response_

### Are you willing to submit a PR?

- [X] Yes I am willing to submit a PR!

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

Contributor guide

Open the contributing guide

Research direction

The issue names no files or tests. Start by locating Airflow's existing access-control handling and the DAG owner and tag data, then define how permissions should apply to matching DAGs and newly created DAGs. Done means the permission behavior is specified, implemented, and covered by tests for both owner- and tag-based matching.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authorization
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.