incubator-airflow/airflow/security
Xiaodong DENG fbd8348d0c
Allow all default roles to view Profile page + allow editing profile/resetting password for DB-ModelView. (#12971)
This is a change discussed long time back in https://github.com/apache/airflow/pull/3889#issuecomment-507635839

Essentially, the 7 permission-resource pairs are added for all users:
- can_this_form_post on UserInfoEditView
- can_this_form_get on UserInfoEditView
- can_userinfo on UserDBModelView
- userinfoedit on UserDBModelView
- can_this_form_post on ResetMyPasswordView
- can_this_form_get on ResetMyPasswordView
- resetmypassword on UserDBModelView

In addition, can_userinfo is added for all possible User ModelViews, so users can also view profile when
the webserver is using different setting-ups.
But they are ONLY allowed to edit profile and reset password when it's UserDBModelView
2020-12-10 16:04:37 +01:00
..
__init__.py [AIRFLOW-6714] Remove magic comments about UTF-8 (#7338) 2020-02-02 22:18:19 +01:00
kerberos.py Enable Black - Python Auto Formmatter (#9550) 2020-11-03 23:51:54 +00:00
permissions.py Allow all default roles to view Profile page + allow editing profile/resetting password for DB-ModelView. (#12971) 2020-12-10 16:04:37 +01:00
utils.py Use PyUpgrade to use Python 3.6 features (#11447) 2020-11-03 21:53:59 +00:00