diff --git a/UPDATING.md b/UPDATING.md index 78b8327f05560..4d84f4744fb63 100644 --- a/UPDATING.md +++ b/UPDATING.md @@ -12,6 +12,15 @@ so you might need to update your config. `task_runner = StandardTaskRunner` +### DAG level Access Control for new RBAC UI + +Extend and enhance new Airflow RBAC UI to support DAG level ACL. Each dag now has two permissions(one for write, one for read) associated('can_dag_edit', 'can_dag_read'). +The admin will create new role, associate the dag permission with the target dag and assign that role to users. That user can only access / view the certain dags on the UI +that he has permissions on. If a new role wants to access all the dags, the admin could associate dag permissions on an artificial view(``all_dags``) with that role. + +We also provide a new cli command(``sync_perm``) to allow admin to auto sync permissions. + + ### min_file_parsing_loop_time config option temporarily disabled The scheduler.min_file_parsing_loop_time config option has been temporarily removed due to @@ -27,14 +36,6 @@ dependency (python-nvd3 -> python-slugify -> unidecode). The method name was changed to be compatible with the Python 3.7 async/await keywords -### DAG level Access Control for new RBAC UI - -Extend and enhance new Airflow RBAC UI to support DAG level ACL. Each dag now has two permissions(one for write, one for read) associated('can_dag_edit', 'can_dag_read'). -The admin will create new role, associate the dag permission with the target dag and assign that role to users. That user can only access / view the certain dags on the UI -that he has permissions on. If a new role wants to access all the dags, the admin could associate dag permissions on an artificial view(``all_dags``) with that role. - -We also provide a new cli command(``sync_perm``) to allow admin to auto sync permissions. - ### Setting UTF-8 as default mime_charset in email utils ### Add a configuration variable(default_dag_run_display_number) to control numbers of dag run for display