Work in progress. Feedback welcome.

Introduction

JIRA: 

Several Airflow users have a need for more rigorous security in Airflow. Part of this involves authentication (authn) and authorization (authz) in Airflow's UI. The current security problems with Airflow's UI are:

  1. Everything is under /admin
  2. There is very limited authorization (authz) functionality
  3. There is no auditing about who is triggering an action via the UI

The goal of this document is to address these issues.

Design

The idea is to add a new endpoint called /dags, which is parallel to the /admins UI. This UI will use the same template as the existing DAGs UI in /admin. It will not, however, have any other tabs (Data Profiling, Browse, Admin).

Roles

We will introduce two levels of access:

Implementation