Skip to content

[v3-2-test] Filter external dependency nodes by readable DAGs in structure_data endpoint (#65342)#65534

Open
github-actions[bot] wants to merge 1 commit intov3-2-testfrom
backport-01888df-v3-2-test
Open

[v3-2-test] Filter external dependency nodes by readable DAGs in structure_data endpoint (#65342)#65534
github-actions[bot] wants to merge 1 commit intov3-2-testfrom
backport-01888df-v3-2-test

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

The structure_data endpoint returned external dependency nodes for
linked DAGs without checking whether the caller had read permission
on those DAGs. Add the ReadableDagsFilterDep and skip dependency
entries that reference DAGs outside the caller's readable set.
(cherry picked from commit 01888df)

Co-authored-by: Jarek Potiuk jarek@potiuk.com
Generated-by: Claude Opus 4.6 (1M context) following the guidelines at
https: //github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions

…cture_data endpoint (#65342)

The structure_data endpoint returned external dependency nodes for
linked DAGs without checking whether the caller had read permission
on those DAGs. Add the ReadableDagsFilterDep and skip dependency
entries that reference DAGs outside the caller's readable set.
(cherry picked from commit 01888df)

Co-authored-by: Jarek Potiuk <jarek@potiuk.com>
Generated-by: Claude Opus 4.6 (1M context) following the guidelines at
https: //github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:API Airflow's REST/HTTP API

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant