Repository: zeppelin
Updated Branches:
  refs/heads/master 50cfabdf9 -> 0274cfb7a


[ZEPPELIN-3054] Update conf/shiro.ini.template so that non-admin users can 
restart interpreters on a notebook page

### What is this PR for?
On the default configuration of `conf/shiro.ini.template`, non admin users 
cannot restart interpreters on their notebook pages because the path 
`/api/interpreter/setting/restart/**` is not allowed to being accessed by non 
admin users.

<img width="1741" alt="screen shot 2017-11-16 at 14 07 05" 
src="https://user-images.githubusercontent.com/31149688/32875326-b0d1bf66-cada-11e7-98b7-6fd058cff3f6.png";>

It is convenient that all authenticated users can restart interpreters on their 
notebook pages by default, so the following line should be inserted into 
conf/shiro.ini.template:

```
/api/interpreter/setting/restart/** = authc
```

### What type of PR is it?
[Improvement]

### Todos

### What is the Jira issue?
https://issues.apache.org/jira/browse/ZEPPELIN-3054

### How should this be tested?
* Tested manually. I confirmed that non admin users can restart interpreters on 
a notebook page but still cannot access to the interpreter settings page by 
using `conf/shiro.ini.template`.

### Screenshots (if appropriate)

### Questions:
* Does the licenses files need update? No.
* Is there breaking changes for older versions? No.
* Does this needs documentation? No.

Author: Keiji Yoshida <[email protected]>

Closes #2673 from kjmrknsn/ZEPPELIN-3054 and squashes the following commits:

37e736d [Keiji Yoshida] [ZEPPELIN-3054] Update conf/shiro.ini.template so that 
non-admin users can restart interpreters on a notebook page


Project: http://git-wip-us.apache.org/repos/asf/zeppelin/repo
Commit: http://git-wip-us.apache.org/repos/asf/zeppelin/commit/0274cfb7
Tree: http://git-wip-us.apache.org/repos/asf/zeppelin/tree/0274cfb7
Diff: http://git-wip-us.apache.org/repos/asf/zeppelin/diff/0274cfb7

Branch: refs/heads/master
Commit: 0274cfb7a4dd775c878461bf35431470f48b72b9
Parents: 50cfabd
Author: Keiji Yoshida <[email protected]>
Authored: Thu Nov 16 14:28:43 2017 +0900
Committer: Lee moon soo <[email protected]>
Committed: Mon Nov 20 10:36:06 2017 -0800

----------------------------------------------------------------------
 conf/shiro.ini.template | 3 +++
 1 file changed, 3 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/zeppelin/blob/0274cfb7/conf/shiro.ini.template
----------------------------------------------------------------------
diff --git a/conf/shiro.ini.template b/conf/shiro.ini.template
index 756ba79..b306359 100644
--- a/conf/shiro.ini.template
+++ b/conf/shiro.ini.template
@@ -96,6 +96,9 @@ admin = *
 # uncomment the line second last line (/** = anon) and comment the last line 
(/** = authc)
 #
 /api/version = anon
+# Allow all authenticated users to restart interpreters on a notebook page.
+# Comment out the following line if you would like to authorize only admin 
users to restart interpreters.
+/api/interpreter/setting/restart/** = authc
 /api/interpreter/** = authc, roles[admin]
 /api/configurations/** = authc, roles[admin]
 /api/credential/** = authc, roles[admin]

Reply via email to