apache / apache/airflow

3.1.6 UI Security page Access denied for Admin (Denied for: can_read on CustomUserLDAPModelView)

Open
#60,972 7 comments 0 reactions 0 assignees View on GitHub
area:auth area:core kind:bug
Dominant language
Python
Stars
46.9k
Forks
17.8k
Avg merge
2d 9h
Merged PRs (30d)
472

Description

### Apache Airflow version

3.1.6

### If "Other Airflow 3 version" selected, which one?

_No response_

### What happened?

Upgrade from 3.1.5 to 3.1.6 leads to Access denied on Security section (Users, Roles, etc.)

### What you think should happen instead?

_No response_

### How to reproduce

I am using LDAP, after upgrade from 3.1.5 to 3.1.6 all Admin users are not able to open a security pages (users, roles, etc.).
In logs:
```
Access is Denied for: can_read on: CustomUserLDAPModelView
[warning ] Access is Denied for: can_read on: CustomUserLDAPModelView [flask_appbuilder.security.decorators] loc=decorators.py:153
```

- It worked in v3.1.5
- LDAP users 100% have [Admin] role, I can check this via CLI. I also added [Viewer] role just in case but with no success
- I tried to create a database from scratch, same result.

**UPD** I switched from AUTH_LDAP to AUTH_DB: Access Denied with the default user
```
username | email | first_name | last_name | roles
==========+===========================+==============+=============+======
airflow | airflowadmin@example.com | Airflow | Admin | Admin
```

### Operating System

OEL9

### Versions of Apache Airflow Providers

_No response_

### Deployment

Docker-Compose

### Deployment details

_No response_

### Anything else?

_No response_

### Are you willing to submit PR?

- [ ] Yes I am willing to submit a PR!

### Code of Conduct

- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.