apache / apache/airflow

Grant Dag Viewers access to the audit logs for Dags that they have access to.

Open
#72,238 1 comment 0 reactions 0 assignees View on GitHub
area:auth area:UI kind:feature needs-triage
Dominant language
Python
Stars
46.9k
Forks
17.8k
Avg merge
2d 9h
Merged PRs (30d)
472

Description

### Description

The UI provides a handy tab for accessing audit logs relating to a Dag, DagRun or Task, however this tab is only accessible to Admins. This tab contains information on task scheduling, like when a task gets killed externally by the executor or scheduler (e.g. celery timeouts, airflow heartbeat timeouts)

### Use case/motivation

It would be useful to allow users with Viewer permissions for a dag to access a filtered version of the Audit log relating to their dag, as this would aid in debugging issues when they occur.

### Related issues

_No response_

### Are you willing to submit a PR?

- [ ] Yes I am willing to submit a PR!

### Code of Conduct

- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

Contributor guide

Open the contributing guide

Research direction

Start from the UI tab that displays audit logs for a DAG, DAG run, or task, then trace how Viewer permissions are checked. Define the filtered view around DAGs a user can access, while preserving the existing Admin access; done means eligible viewers can inspect relevant audit events without seeing other DAGs' logs.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authorization
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.