3.1.6 UI Security page Access denied for Admin (Denied for: can_read on CustomUserLDAPModelView)
- Dominant language
- Python
- Stars
- 46.9k
- Forks
- 17.8k
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 472
Description
### Apache Airflow version
3.1.6
### If "Other Airflow 3 version" selected, which one?
_No response_
### What happened?
Upgrade from 3.1.5 to 3.1.6 leads to Access denied on Security section (Users, Roles, etc.)
### What you think should happen instead?
_No response_
### How to reproduce
I am using LDAP, after upgrade from 3.1.5 to 3.1.6 all Admin users are not able to open a security pages (users, roles, etc.).
In logs:
```
Access is Denied for: can_read on: CustomUserLDAPModelView
[warning ] Access is Denied for: can_read on: CustomUserLDAPModelView [flask_appbuilder.security.decorators] loc=decorators.py:153
```
- It worked in v3.1.5
- LDAP users 100% have [Admin] role, I can check this via CLI. I also added [Viewer] role just in case but with no success
- I tried to create a database from scratch, same result.
**UPD** I switched from AUTH_LDAP to AUTH_DB: Access Denied with the default user
```
username | email | first_name | last_name | roles
==========+===========================+==============+=============+======
airflow | airflowadmin@example.com | Airflow | Admin | Admin
```
### Operating System
OEL9
### Versions of Apache Airflow Providers
_No response_
### Deployment
Docker-Compose
### Deployment details
_No response_
### Anything else?
_No response_
### Are you willing to submit PR?
- [ ] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
Contributor guide
Assessment
This issue has not been assessed yet.