Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow auth managers to override the security manager #32525

Merged
merged 13 commits into from
Jul 24, 2023

Conversation

vincbeck
Copy link
Contributor

The current security manager is highly dependent on FAB (Flask App Builder). One of the goal of AIP-56 is to move these FAB related operations to the auth manager. This PR adds capability for the auth manager to override the security manager. As such, overtime and multiple iteration/PRs we can move slowly operations/methods which are in the security manager to the security manager override defined in the auth manager module.

This PR moves register_views and few other small methods from core Airflow to the auth manager module. Again, the goal is to move by iterations things from the security manager (in core Airflow) to the auth manager module.


^ Add meaningful description above

Read the Pull Request Guidelines for more information.
In case of fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragment file, named {pr_number}.significant.rst or {issue_number}.significant.rst, in newsfragments.

@boring-cyborg boring-cyborg bot added the area:webserver Webserver related Issues label Jul 11, 2023
@vincbeck vincbeck added the AIP-56 Extensible user management label Jul 11, 2023
airflow/www/security.py Outdated Show resolved Hide resolved
airflow/www/views.py Outdated Show resolved Hide resolved
@vincbeck vincbeck requested a review from uranusjr July 17, 2023 14:32
@vincbeck
Copy link
Contributor Author

@uranusjr Could you please review?

@o-nikolas
Copy link
Contributor

@uranusjr Could you please review?

Or maybe @potiuk or @jedcunningham?

Copy link
Member

@uranusjr uranusjr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me other than the comment above.

@ferruzzi ferruzzi merged commit 031e394 into apache:main Jul 24, 2023
42 checks passed
@vincbeck vincbeck deleted the vincbeck/get_manager_class branch July 24, 2023 19:47
@ephraimbuddy ephraimbuddy added the changelog:skip Changes that should be skipped from the changelog (CI, tests, etc..) label Aug 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
AIP-56 Extensible user management area:webserver Webserver related Issues changelog:skip Changes that should be skipped from the changelog (CI, tests, etc..)
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants