Previous versions (before 2.0) allowed for granular can_edit DAG permissions so that different user groups can trigger different DAGs and access control is more specific. Since 2.0 it seems that this does not work as expected.

How to reproduce:
Create a copy of the VIEWER role, try adding it can dag edit on a specific DAG. **Expected Result:** user can trigger said DAG. **Actual Result:** user access is denied.

It seems to be a new parameter was added: **can create on DAG runs** and without it the user cannot run DAGs, however, with it, the user can run all DAGs without limitations and I believe this is an unintended use.

tests/www/test_views.py
"""
        Test that textarea in Trigger DAG UI is pre-populated
        with json config when the conf URL parameter is passed,
        or if a params dict is passed in the DAG
            1. Conf is not included in URL parameters -> DAG.conf is in textarea
            2. Conf is passed as a URL parameter -> passed conf json is in textarea
        """
        test_dag_id = "example_bash_operator"
        doc_md = "Example Bash Operator"
        if not request_conf:
            resp = self.client.get(f'trigger?dag_id={test_dag_id}')
        else:
            test_request_conf = json.dumps(request_conf, indent=4)
            resp = self.client.get(f'trigger?dag_id={test_dag_id}&conf={test_request_conf}&doc_md={doc_md}')
        expected_dag_conf = json.dumps(expected_conf, indent=4).replace("\"", "&#34;")
        self.check_content_in_response(
            f'<textarea class="form-control" name="conf" id="json">{expected_dag_conf}</textarea>',
            resp,
        )
    def test_trigger_endpoint_uses_existing_dagbag(self):
        """
        Test that Trigger Endpoint uses the DagBag already created in views.py
        instead of creating a new one.
        """
        url = 'trigger?dag_id=example_bash_operator'
        resp = self.client.post(url, data={}, follow_redirects=True)
        self.check_content_in_response('example_bash_operator', resp)
class TestExtraLinks(TestBase):