Delete comments <a href="http://www.aptis.info/portfolio/delete-all-comments/" target="_blank" title="Help"> <span class="aui-icon aui-icon-small aui-iconfont-help aptis-delete-all-comments-title-icon">Help</span> </a>

[citation needed] What do you mean here? This is not something that is mentione...

Ash Berlin-Taylor | Dec 02, 2021

Comment from my side, as I thought it's an important distinction. It's more abo...

Jarek Potiuk | Dec 02, 2021

Right, I just put a note to "motivation" (should move it a section?) that acces...

Mateusz Henc | Dec 02, 2021

Ah okay, that wasn't at all what I thought row-level token might mean.

Ash Berlin-Taylor | Dec 02, 2021

You haven't explained how the code will look like to support both with and with...

Ash Berlin-Taylor | Dec 02, 2021

It's just 'self.is_db_isolation' which is always false if the mode is not enabl...

Mateusz Henc | Dec 02, 2021

I do not like having the DB API server and the existing Rest API as separate co...

Ash Berlin-Taylor | Dec 02, 2021

I see your point. We had some discussion about whether to define new API or try...

Mateusz Henc | Dec 02, 2021

I think we all want to achieve the same, but maybe it needs more explanation an...

Jarek Potiuk | Dec 02, 2021

Also - maybe that was not clear enough (mhenc maybe you could also clarify thi...

Jarek Potiuk | Dec 02, 2021

Hi Folks, This is a fantastic initiative that will be a great benefit to all e...

John Jackson | Dec 16, 2021

Great initiative and a good step towards multi-tenant Airflow! I would like to ...

Bolke de Bruin | Dec 20, 2021

Yep. First step it is. Thanks for kind words bolke The more I talk to diffe...

Jarek Potiuk | Dec 21, 2021

This would be a great enterprise feature (re MWAA) as it reduces the harm users...

Niko Oliveira | Jan 07, 2022

Would it be possible to run the internal API on a different port than the REST ...

Sam Wheating | Jan 19, 2022

Yes. Of course

Jarek Potiuk | Jan 19, 2022

An idea: even if the API server is "in" the webserver, re-writing it to send al...

Ash Berlin-Taylor | Feb 02, 2022

Hmm. Interesting idea indeed. I actually quite like it when you mentioned it. ...

Jarek Potiuk | Feb 02, 2022

Hm. i focused on the "in-process" not the webserver - so I misunderstood it, b...

Jarek Potiuk | Feb 16, 2022

potiuk How these internal APIs will look like? Will it be similar api_connexion...

Omar Al-Safi | Apr 04, 2022

It's updated not omarsmak (sorry - I missed your question before) - yeah. Webs...

Jarek Potiuk | Aug 05, 2022

Cross posting part of my comment from AIP-56 https://cwiki.apache.org/confluenc...

Philippe Lanoe | Jun 09, 2023

Do we plan to block DB access to all untrusted components ? If we do not do th...

Jarek Potiuk | Jun 09, 2023

DB access point: great. Is it already implemented or is there still any backdoo...

Philippe Lanoe | Jun 12, 2023

if settings.DATABASE_ACCESS_ISOLATION: return InternalAPIClient.dagbag...

Jarek Potiuk | Jun 12, 2023

Yes but the decorator is applied within the core code of Airflow (which is OK f...

Philippe Lanoe | Jun 12, 2023

I am confused. What are you asking about? Why ideally? What's the difference. ...

Jarek Potiuk | Jun 12, 2023

Concrete example is this: https://github.com/apache/airflow/blob/eaaa030ab4dc4d...

Philippe Lanoe | Jun 12, 2023

there is absolutely no problem in introducing "get_latest_tis_for_dags" method ...

Jarek Potiuk | Jun 12, 2023

My point here is that the decorator should only be applied to (new) data access...

Philippe Lanoe | Jun 12, 2023

> DB access point: great. Is it already implemented or is there still any backd...

Jarek Potiuk | Jun 12, 2023

Thanks for the clarification

Philippe Lanoe | Jun 12, 2023

Is it possible to get an example about this backdoor ? The sentence above state...

Philippe Lanoe | Jun 12, 2023

There is no backdoor about the DB. This is not about DB access but about escapi...

Jarek Potiuk | Jun 12, 2023

Thanks, since the whole section is about DB access I did not understand it the ...

Philippe Lanoe | Jun 12, 2023

Nope. There is no such document. Because we have no sandboxing.

Jarek Potiuk | Jun 12, 2023

Do I understand correctly that AIP-46 is somehow aiming to deal with/address/im...

Philippe Lanoe | Jun 12, 2023

Ah. Yes it might be one of the approaches to get some form of sandboxing also f...

Jarek Potiuk | Jun 12, 2023

In fact - if you asked me 5 months ago when the AIP was written, then i could p...

Jarek Potiuk | Jun 12, 2023

Thanks, I can close this comment because I know understand what is meant by san...

Philippe Lanoe | Jun 12, 2023

potiuk bouncing on your comment that only Admins can author DAGs. Wouldn't such...

Philippe Lanoe | Jun 12, 2023

No. This has nothing to do with the "person" the "no-user" mentioned here is ye...

Jarek Potiuk | Jun 12, 2023

Thanks, I did not understand the sentence on the AIP the same way. Resolving as...

Philippe Lanoe | Jun 12, 2023

Delete comments Help