Description
#417 shipped with basic input checks, but would benefit from stricter input validation and/or limiting access.
Airflow isn't able to confirm whether or not the input table name is a feature collection and is safe to drop. Anyone with instance access can also run the DAG.
Determine whether the DAG will be triggered from Airflow, externally, or both to inform appropriate access + validation checks.
See recent Keycloak/SM2A integration and DAG Launcher work for possible service to service uses.
Acceptance Criteria
Description
#417 shipped with basic input checks, but would benefit from stricter input validation and/or limiting access.
Airflow isn't able to confirm whether or not the input table name is a feature collection and is safe to drop. Anyone with instance access can also run the DAG.
Determine whether the DAG will be triggered from Airflow, externally, or both to inform appropriate access + validation checks.
See recent Keycloak/SM2A integration and DAG Launcher work for possible service to service uses.
Acceptance Criteria