Grant Dag Viewers access to the audit logs for Dags that they have access to.
- Dominant language
- Python
- Stars
- 46.9k
- Forks
- 17.8k
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 472
Description
### Description
The UI provides a handy tab for accessing audit logs relating to a Dag, DagRun or Task, however this tab is only accessible to Admins. This tab contains information on task scheduling, like when a task gets killed externally by the executor or scheduler (e.g. celery timeouts, airflow heartbeat timeouts)
### Use case/motivation
It would be useful to allow users with Viewer permissions for a dag to access a filtered version of the Audit log relating to their dag, as this would aid in debugging issues when they occur.
### Related issues
_No response_
### Are you willing to submit a PR?
- [ ] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
Contributor guide
Research direction
Start from the UI tab that displays audit logs for a DAG, DAG run, or task, then trace how Viewer permissions are checked. Define the filtered view around DAGs a user can access, while preserving the existing Admin access; done means eligible viewers can inspect relevant audit events without seeing other DAGs' logs.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authorization
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 50/100