Page History

...

We will add the concept of groups. Users can be a member of a group. Both groups and members can be assigned DAG access permissions.

Implementation

Airflow already uses Flask-Login, so we can use this as the login mechanism. Airflow already has LDAP and Kerberos backends (as well as a GitHub backend).

We will need to:

1. Add the three Flask-Principal needs that map to the roles above.
2. Hook Flask-Principal up to Flask-Login by sending a proper signals