<p dir="auto">WARNING - Refused to delete permission view, assoc with role exists DAG Runs.clear Admin</p>
<p dir="auto">Issue with airlow webserver command on airflow 2.1.0</p>
<p dir="auto">Please help</p>
<p dir="auto"><strong>Apache Airflow version</strong>:<br>
1.10.11</p>
<p dir="auto"><strong>Kubernetes version (if you are using kubernetes)</strong> (use <code class="notranslate">kubectl version</code>):<br>
Client Version: version.Info{Major:"1", Minor:"18", GitVersion:"v1.18.6", GitCommit:"dff82dc0de47299ab66c83c626e08b245ab19037", GitTreeState:"clean", BuildDate:"2020-07-16T00:04:31Z", GoVersion:"go1.14.4", Compiler:"gc", Platform:"darwin/amd64"}<br>
Server Version: version.Info{Major:"1", Minor:"17", GitVersion:"v1.17.4", GitCommit:"8d8aa39598534325ad77120c120a22b3a990b5ea", GitTreeState:"clean", BuildDate:"2020-03-13T06:39:58Z", GoVersion:"go1.13.8", Compiler:"gc", Platform:"linux/amd64"}</p>
<p dir="auto"><strong>Environment</strong>:</p>
<ul dir="auto">
<li><strong>Cloud provider or hardware configuration</strong>: Azure Kubernetes Service</li>
<li><strong>OS</strong> (e.g. from /etc/os-release): Debian GNU/Linux 10 (buster)</li>
<li><strong>Kernel</strong> (e.g. <code class="notranslate">uname -a</code>): Linux airflow-web-65cb7d9cb8-qzcbv 4.15.0-1089-azure <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="92247084" data-permission-text="Title is private" data-url="https://github.com/apache/airflow/issues/99" data-hovercard-type="pull_request" data-hovercard-url="/apache/airflow/pull/99/hovercard" href="https://github.com/apache/airflow/pull/99">#99</a>~16.04.1-Ubuntu SMP Fri Jun 5 15:30:32 UTC 2020 x86_64 GNU/Linux</li>
<li><strong>Install tools</strong>: Helm chart "stable/airflow"</li>
<li><strong>Others</strong>:</li>
</ul>
<p dir="auto"><strong>What happened</strong>:</p>
<p dir="auto">After upgrading from 1.10.10 to 1.10.11 (and also with new installs of 1.10.11) there are some permission warnings in the webserver logs:</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="[2020-08-14 22:19:30,022] {manager.py:545} WARNING - Refused to delete permission view, assoc with role exists XComModelView.can_add Admin
[2020-08-14 22:19:30,038] {manager.py:545} WARNING - Refused to delete permission view, assoc with role exists XComModelView.can_edit Admin"><pre class="notranslate"><code class="notranslate">[2020-08-14 22:19:30,022] {manager.py:545} WARNING - Refused to delete permission view, assoc with role exists XComModelView.can_add Admin
[2020-08-14 22:19:30,038] {manager.py:545} WARNING - Refused to delete permission view, assoc with role exists XComModelView.can_edit Admin
</code></pre></div>
<p dir="auto">It seems to be directly related to <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="649125466" data-permission-text="Title is private" data-url="https://github.com/apache/airflow/issues/9614" data-hovercard-type="pull_request" data-hovercard-url="/apache/airflow/pull/9614/hovercard" href="https://github.com/apache/airflow/pull/9614">#9614</a> that <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kaxil/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kaxil">@kaxil</a> introduced for 1.10.11 which removes the <code class="notranslate">can_add</code> and <code class="notranslate">can_edit</code> permissions from <code class="notranslate">XComModelView</code>, but Airflow can not delete the permissions from that view because relations to those permissions still exist on the "Admin" and "Op" roles.</p>
<p dir="auto">In more technical terms, the two permissions can't be deleted from <code class="notranslate">ab_permission_view</code> table because each have relations to both the Admin's and Op's role_ids in the <code class="notranslate">ab_permission_view_role</code> table.</p>
<p dir="auto"><strong>What you expected to happen</strong>:<br>
No warnings with Airflow 1.10.11</p>
<p dir="auto"><strong>How to reproduce it</strong>:</p>
<ol dir="auto">
<li>Install 1.10.11</li>
<li>Either:
<ol dir="auto">
<li>View the logs of the webserver</li>
<li>Run any airflow CLI command, such as <code class="notranslate">airflow list_users</code> and view the outputted log messages</li>
</ol>
</li>
<li>After a few lines of the log you will see the warnings</li>
</ol>
<p dir="auto"><strong>Anything else we need to know</strong>:</p>
<p dir="auto">If those 4 role permissions are removed from the <code class="notranslate">ab_permission_view_role</code> table the warnings should stop. I think a migration needs to be added, or some logic that cleans up these role permissions is failing to do its job.</p>